CVE:CVE-2005-2025
CNNVD:CNNVD-200506-188
Cisco VPN系列集线器由通用的远程访问虚拟专网(VPN)平台和将高可用性、高性能和可扩展性与当今最先进的加密和认证技术结合在一起的客户机软件组成，可以为专业运营商或企业用户提供服务。
Cisco VPN集线器中存在远程组名称枚举漏洞，允许攻击者使用字典程序判断集线器上有效的组名称。一旦确定了有效的组名称，攻击者就可以接着从集线器获得口令哈希值，然后再破解这个值确定组口令。
有效的组名称和口令对允许攻击者完成IKE第一阶段认证，对其他用户展开中间人攻击，最终导致非授权访问网络。
solution:Upgrade cisco vpn_3000_concentrator to a higher version than *; Upgrade cisco vpn_3015_concentrator to a higher version than *; Upgrade cisco vpn_3020_concentrator to a higher version than *; Upgrade cisco vpn_3030_concentator to a higher version than *; Upgrade cisco vpn_3060_concentrator to a higher version than *; Upgrade cisco vpn_3080_concentrator to a higher version than *; Upgrade cisco vpn_3000_concentrator_series_software to a higher version than 2.0,2.5.2.a,2.5.2.b,2.5.2.c,2.5.2.d,2.5.2.f,3.0,3.0.3.a,3.0.3.b,3.0.4,3.1(rel,3.1.1,3.1.2,3.1.4,3.5(rel,3.5.1,3.5.2,3.5.3,3.5.4,3.5.5,3.6.1,3.6.3,3.6.5,3.6.7,3.6.7.a,3.6.7.b,3.6.7.c,3.6.7.d,3.6.7.f,3.6.7d,4.0,4.0.1,4.0.5.b,4.1,4.1.5.b,4.1.7.a,4.1.7.b,and avoid the version 2.0,2.5.2.a,2.5.2.b,2.5.2.c,2.5.2.d,2.5.2.f,3.0,3.0.3.a,3.0.3.b,3.0.4,3.1(rel),3.1.1,3.1.2,3.1.4,3.5(rel),3.5.1,3.5.2,3.5.3,3.5.4,3.5.5,3.6.1,3.6.3,3.6.5,3.6.7,3.6.7.a,3.6.7.b,3.6.7.c,3.6.7.d,3.6.7.f,3.6.7d,4.0,4.0.1,4.0.5.b,4.1,4.1.5.b,4.1.7.a,4.1.7.b; Upgrade cisco vpn_3005_concentrator_software to a higher version than 4.0.1,and avoid the version 4.0.1