Cisco IPSec group password weak encryption
Published:		16.04.2004
Source:		BUGTRAQ
SecurityVulns ID:		3612
Type:		m-i-t-m
Level:		5/10
Description:		Group password is stored cleartext in memory. Knowledge of group passwords allows to steal individual password from wire.

Affected:		CISCO : Cisco VPN 3002
		CISCO : Cisco VPN 3000
		CISCO : Cisco VPN Client

Original document

CISCO, Cisco Security Notice: Cisco IPsec VPN Implementation Group Password Usage Vulnerability (16.04.2004)

Discuss:

Read or add your comments to this news (0 comments)