CVE:CVE-2002-1094
CNNVD:CNNVD-200210-217
Cisco VPN 3000 Concentrator 3.5.4之前的2.x.x和3.x.x版本存在信息泄漏漏洞。远程攻击者借助(1)SSH banner，(2)FTP banner，或者（3）不正确的HTTP请求获取潜在的敏感信息。
solution:Upgrade cisco vpn_3000_concentrator_series_software to a higher version than 2.0,2.5.2.a,2.5.2.b,2.5.2.c,2.5.2.d,2.5.2.f,3.0,3.0(rel,3.0.3.a,3.0.3.b,3.0.4,3.1(rel,3.1.1,3.1.2,3.1.4,3.5(rel,3.5.1,3.5.2,3.5.3,and avoid the version 2.0,2.5.2.a,2.5.2.b,2.5.2.c,2.5.2.d,2.5.2.f,3.0,3.0(rel),3.0.3.a,3.0.3.b,3.0.4,3.1(rel),3.1.1,3.1.2,3.1.4,3.5(rel),3.5.1,3.5.2,3.5.3; Upgrade cisco vpn_3002_hardware_client to a higher version than *