{"vuid":"VU#317348","idnumber":"317348","name":"Cisco VPN 3000 Concentrator forces device to reload when processing malformed SSH initialization packet","keywords":["Cisco","VPN 3000 Concentrator","reload device","malformed SSH initialization packet","CSCdz15393"],"overview":"A vulnerability in some Cisco Virtual Private Network (VPN) products could allow a remote attacker to cause a denial of service.","clean_desc":"The Cisco VPN 3000 Series Concentrators and the Cisco VPN 3002 Hardware Clients are Virtual Private Network (VPN) platforms designed to provide secure remote network access. Some models of these devices contain a vulnerability by which a malformed SSH initialization packet sent during the initial SSH session setup may reload the VPN 3000 series concentrator.","impact":"A denial-of-service condition can result from unexpected rebooting of the affected device.","resolution":"Cisco Systems Inc. has released software patches and workaround information for this vulnerability. Please see the vendor information section of this document for more details.","workarounds":"Workarounds Restrict access to the SSH server on the VPN concentrator by applying appropriate rules to the filters for the interfaces such that connections are permitted only from trusted client hosts. Sites may additionally wish to filter SSH connections on network devices that are upstream from the affected VPN Concentrator device. Sites may wish to apply this workaround in conjunction with the application of the recommended patches. As a general rule, the CERT/CC recommends that sites block all types of network traffic that are not explicitly required for normal operation.","sysaffected":"","thanks":"Thanks to Cisco Systems Product Security Incident Response Team for reporting this vulnerability.","author":"This document was written by Chad R Dougherty.","public":["http://www.cisco.com/warp/public/707/cisco-sa-20030507-vpn3k.shtml","http://www.iss.net/security_center/static/11955.php"],"cveids":["CVE-2003-0259"],"certadvisory":"","uscerttechnicalalert":null,"datecreated":"2003-05-07T17:22:17Z","publicdate":"2003-05-07T00:00:00Z","datefirstpublished":"2003-06-23T18:13:30Z","dateupdated":"2003-06-23T18:13:33Z","revision":10,"vrda_d1_directreport":"","vrda_d1_population":"","vrda_d1_impact":"","cam_widelyknown":"15","cam_exploitation":"0","cam_internetinfrastructure":"10","cam_population":"15","cam_impact":"8","cam_easeofexploitation":"8","cam_attackeraccessrequired":"15","cam_scorecurrent":"6.75","cam_scorecurrentwidelyknown":"8.1","cam_scorecurrentwidelyknownexploited":"13.5","ipprotocol":"","cvss_accessvector":"","cvss_accesscomplexity":"","cvss_authentication":null,"cvss_confidentialityimpact":"","cvss_integrityimpact":"","cvss_availabilityimpact":"","cvss_exploitablity":null,"cvss_remediationlevel":"","cvss_reportconfidence":"","cvss_collateraldamagepotential":"","cvss_targetdistribution":"","cvss_securityrequirementscr":"","cvss_securityrequirementsir":"","cvss_securityrequirementsar":"","cvss_basescore":"","cvss_basevector":"","cvss_temporalscore":"","cvss_environmentalscore":"","cvss_environmentalvector":"","metric":6.75,"vulnote":null}