CVE-2003-0258

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 3.5.x through 4.0.REL, when enabling IPSec over TCP for a port on the concentrator, allow remote attackers to reach the private network without authentication.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.cisco.com/warp/public/707/cisco-sa-20030507-vpn3k.shtmlPatch, Vendor Advisory
http://www.kb.cert.org/vuls/id/727780US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/11954
http://www.cisco.com/warp/public/707/cisco-sa-20030507-vpn3k.shtmlPatch, Vendor Advisory
http://www.kb.cert.org/vuls/id/727780US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/11954

Timeline

Published: May 27, 2003
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2003

CVE-2003-02595.0Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 2.x.x through 3.6.7 allows remote attackers to cause a denial of serv CVE-2003-02605.0Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 2.x.x through 3.6.7A allow remote attackers to cause a denial of serv CVE-2003-02614.6fuzz 0.6 and earlier creates temporary files insecurely, which could allow local users to gain root privileges.CVE-2003-02627.2leksbot 1.2.3 in Debian GNU/Linux installs the KATAXWR as setuid root, which allows local users to gain root privileges by exploiting unknow CVE-2003-02637.5Multiple buffer overflows in Floosietek FTGate Pro Mail Server (FTGatePro) 1.22 allow remote attackers to execute arbitrary code via long (1 CVE-2003-02647.5Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO argument to slmail.exe,CVE-2003-02656.2Race condition in SDBINST for SAP database 7.3.0.29 creates critical files with world-writable permissions before initializing the setuid bi CVE-2003-02667.5Multiple buffer overflows in SLWebMail 3 on Windows systems allows remote attackers to cause a denial of service and possibly execute arbitr CVE-2003-02675.0ShowGodLog.dll in SLWebMail 3 on Windows systems allows remote attackers to read arbitrary files by directly calling ShowGodLog.dll with an CVE-2003-02685.0SLWebMail 3 on Windows systems allows remote attackers to identify the full path of the server via invalid requests to DLLs such as WebMailR CVE-2003-02697.2Buffer overflow in youbin allows local users to gain privileges via a long HOME environment variable.CVE-2003-02707.6The administration capability for Apple AirPort 802.11 wireless access point devices uses weak encryption (XOR with a fixed key) for protect