CVE:CVE-2003-0260
CNNVD:CNNVD-200305-076
Cisco VPN 3000系列集中器和Cisco VPN 3002硬件客户端从2.x.x到3.6.7A存在漏洞。远程攻击者可以通过大量的畸形的ICMP数据包导致服务拒绝(放缓和可能重装）。
solution:Upgrade cisco vpn_3015_concentrator to a higher version than *; Upgrade cisco vpn_3030_concentator to a higher version than *; Upgrade cisco vpn_3060_concentrator to a higher version than *; Upgrade cisco vpn_3080_concentrator to a higher version than *; Upgrade cisco vpn_3000_concentrator_series_software to a higher version than 2.0,2.5.2.a,2.5.2.b,2.5.2.c,2.5.2.d,2.5.2.f,3.0,3.0.3.a,3.0.3.b,3.0.4,3.1,3.1(rel,3.1.1,3.1.2,3.1.4,3.5(rel,3.5.1,3.5.2,3.5.3,3.5.4,3.5.5,3.6,3.6.1,3.6.3,3.6.5,3.6.7,and avoid the version 2.0,2.5.2.a,2.5.2.b,2.5.2.c,2.5.2.d,2.5.2.f,3.0,3.0.3.a,3.0.3.b,3.0.4,3.1,3.1(rel),3.1.1,3.1.2,3.1.4,3.5(rel),3.5.1,3.5.2,3.5.3,3.5.4,3.5.5,3.6,3.6.1,3.6.3,3.6.5,3.6.7; Upgrade cisco vpn_3002_hardware_client to a higher version than *