Vulnerability Name:

CVE-2005-2025 (CCN-21072)

Assigned:2005-06-20
Published:2005-06-20
Updated:2018-10-30
Summary:Cisco VPN 3000 Concentrator before 4.1.7.F allows remote attackers to determine valid groupnames by sending an IKE Aggressive Mode packet with the groupname in the ID field, which generates a response if the groupname is valid, but does not generate a response for an invalid groupname.
CVSS v3 Severity:5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): Low
Integrity (I): None
Availibility (A): None
CVSS v2 Severity:5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): None
Availibility (A): None
5.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): None
Availibility (A): None
Vulnerability Type:CWE-Other
Vulnerability Consequences:Obtain Information
References:Source: MITRE
Type: CNA
CVE-2005-2025

Source: MITRE
Type: CNA
CVE-2010-4354

Source: CCN
Type: SA42414
Cisco IPsec VPN Implementation Group Name Enumeration Weakness

Source: CCN
Type: Cisco Security Response
Cisco IPSec VPN Implementation Group Name Enumeration Vulnerability

Source: CCN
Type: NTA Monitor Security Advisory
Cisco VPN Concentrator Groupname Enumeration Vulnerability

Source: MISC
Type: Exploit, Patch, Vendor Advisory
http://www.nta-monitor.com/news/vpn-flaws/cisco/VPN-Concentrator/index.htm

Source: CCN
Type: OSVDB ID: 17405
Cisco VPN Concentrator Group Name Enumeration

Source: CCN
Type: OSVDB ID: 69582
Cisco Multiple Products IPSec VPN Aggressive Mode IKE Phase I Message Response Group Name Remote Enumeration

Source: BID
Type: Patch, Vendor Advisory
13992

Source: CCN
Type: BID-13992
Cisco VPN Concentrator Groupname Enumeration Weakness

Source: CCN
Type: BID-45161
Cisco IPSec VPN Groupname Enumeration Weakness

Source: VUPEN
Type: UNKNOWN
ADV-2005-0822

Source: XF
Type: UNKNOWN
cisco-groupname-disclosure(21072)

Vulnerable Configuration:Configuration 1:
  • cpe:/h:cisco:vpn_3000_concentrator:*:*:*:*:*:*:*:*
  • OR cpe:/h:cisco:vpn_3015_concentrator:*:*:*:*:*:*:*:*
  • OR cpe:/h:cisco:vpn_3020_concentrator:*:*:*:*:*:*:*:*
  • OR cpe:/h:cisco:vpn_3030_concentator:*:*:*:*:*:*:*:*
  • OR cpe:/h:cisco:vpn_3060_concentrator:*:*:*:*:*:*:*:*
  • OR cpe:/h:cisco:vpn_3080_concentrator:*:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:vpn_3000_concentrator_series_software:2.0:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:vpn_3000_concentrator_series_software:2.5.2.a:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:vpn_3000_concentrator_series_software:2.5.2.b:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:vpn_3000_concentrator_series_software:2.5.2.c:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:vpn_3000_concentrator_series_software:2.5.2.d:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:vpn_3000_concentrator_series_software:2.5.2.f:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:vpn_3000_concentrator_series_software:3.0:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:vpn_3000_concentrator_series_software:3.0.3.a:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:vpn_3000_concentrator_series_software:3.0.3.b:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:vpn_3000_concentrator_series_software:3.0.4:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:vpn_3000_concentrator_series_software:3.1(rel):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:vpn_3000_concentrator_series_software:3.1.1:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:vpn_3000_concentrator_series_software:3.1.2:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:vpn_3000_concentrator_series_software:3.1.4:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:vpn_3000_concentrator_series_software:3.5(rel):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:vpn_3000_concentrator_series_software:3.5.1:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:vpn_3000_concentrator_series_software:3.5.2:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:vpn_3000_concentrator_series_software:3.5.3:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:vpn_3000_concentrator_series_software:3.5.4:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:vpn_3000_concentrator_series_software:3.5.5:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:vpn_3000_concentrator_series_software:3.6.1:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:vpn_3000_concentrator_series_software:3.6.3:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:vpn_3000_concentrator_series_software:3.6.5:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:vpn_3000_concentrator_series_software:3.6.7:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:vpn_3000_concentrator_series_software:3.6.7.a:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:vpn_3000_concentrator_series_software:3.6.7.b:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:vpn_3000_concentrator_series_software:3.6.7.c:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:vpn_3000_concentrator_series_software:3.6.7.d:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:vpn_3000_concentrator_series_software:3.6.7.f:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:vpn_3000_concentrator_series_software:3.6.7d:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:vpn_3000_concentrator_series_software:4.0:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:vpn_3000_concentrator_series_software:4.0.1:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:vpn_3000_concentrator_series_software:4.0.5.b:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:vpn_3000_concentrator_series_software:4.1:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:vpn_3000_concentrator_series_software:4.1.5.b:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:vpn_3000_concentrator_series_software:4.1.7.a:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:vpn_3000_concentrator_series_software:4.1.7.b:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:vpn_3005_concentrator_software:4.0.1:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/h:cisco:vpn_3015_concentrator:*:*:*:*:*:*:*:*
  • OR cpe:/h:cisco:vpn_3020_concentrator:*:*:*:*:*:*:*:*
  • OR cpe:/h:cisco:vpn_3060_concentrator:*:*:*:*:*:*:*:*
  • OR cpe:/h:cisco:vpn_3080_concentrator:*:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    cisco vpn 3000 concentrator *
    cisco vpn 3015 concentrator *
    cisco vpn 3020 concentrator *
    cisco vpn 3030 concentator *
    cisco vpn 3060 concentrator *
    cisco vpn 3080 concentrator *
    cisco vpn 3000 concentrator series software 2.0
    cisco vpn 3000 concentrator series software 2.5.2.a
    cisco vpn 3000 concentrator series software 2.5.2.b
    cisco vpn 3000 concentrator series software 2.5.2.c
    cisco vpn 3000 concentrator series software 2.5.2.d
    cisco vpn 3000 concentrator series software 2.5.2.f
    cisco vpn 3000 concentrator series software 3.0
    cisco vpn 3000 concentrator series software 3.0.3.a
    cisco vpn 3000 concentrator series software 3.0.3.b
    cisco vpn 3000 concentrator series software 3.0.4
    cisco vpn 3000 concentrator series software 3.1(rel)
    cisco vpn 3000 concentrator series software 3.1.1
    cisco vpn 3000 concentrator series software 3.1.2
    cisco vpn 3000 concentrator series software 3.1.4
    cisco vpn 3000 concentrator series software 3.5(rel)
    cisco vpn 3000 concentrator series software 3.5.1
    cisco vpn 3000 concentrator series software 3.5.2
    cisco vpn 3000 concentrator series software 3.5.3
    cisco vpn 3000 concentrator series software 3.5.4
    cisco vpn 3000 concentrator series software 3.5.5
    cisco vpn 3000 concentrator series software 3.6.1
    cisco vpn 3000 concentrator series software 3.6.3
    cisco vpn 3000 concentrator series software 3.6.5
    cisco vpn 3000 concentrator series software 3.6.7
    cisco vpn 3000 concentrator series software 3.6.7.a
    cisco vpn 3000 concentrator series software 3.6.7.b
    cisco vpn 3000 concentrator series software 3.6.7.c
    cisco vpn 3000 concentrator series software 3.6.7.d
    cisco vpn 3000 concentrator series software 3.6.7.f
    cisco vpn 3000 concentrator series software 3.6.7d
    cisco vpn 3000 concentrator series software 4.0
    cisco vpn 3000 concentrator series software 4.0.1
    cisco vpn 3000 concentrator series software 4.0.5.b
    cisco vpn 3000 concentrator series software 4.1
    cisco vpn 3000 concentrator series software 4.1.5.b
    cisco vpn 3000 concentrator series software 4.1.7.a
    cisco vpn 3000 concentrator series software 4.1.7.b
    cisco vpn 3005 concentrator software 4.0.1
    cisco vpn 3015 concentrator *
    cisco vpn 3020 concentrator *
    cisco vpn 3060 concentrator *
    cisco vpn 3080 concentrator *