Multiple Vendor IKE Insecure XAUTH Implementation Vulnerabilities

Bugtraq ID:	9209
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 11 2003 12:00AM
Updated:	Dec 11 2003 12:00AM
Credit:	Discovery has been credited to Thor Lancelot Simon <tls@rek.tjls.com>.
Vulnerable:	Cisco VPN Client for Windows 4.0.2 C Cisco VPN Client for Windows 4.0.2 A Cisco VPN Client for Windows 3.6.1 Cisco VPN Client for Windows 3.6 (Rel) Cisco VPN Client for Windows 3.6 Cisco VPN Client for Windows 3.5.4 Cisco VPN Client for Windows 3.5.2 B Cisco VPN Client for Windows 3.5.2 Cisco VPN Client for Windows 3.5.1 C Cisco VPN Client for Windows 3.5.1 Cisco VPN Client for Windows 3.1 Cisco VPN Client for Windows 3.0.5 Cisco VPN Client for Windows 3.0 Cisco VPN Client for Windows 2.0 Cisco VPN Client for Solaris 4.0.2 C Cisco VPN Client for Solaris 4.0.2 A Cisco VPN Client for Solaris 3.6.1 Cisco VPN Client for Solaris 3.6 Cisco VPN Client for Solaris 3.5.4 Cisco VPN Client for Solaris 3.5.2 B Cisco VPN Client for Solaris 3.5.2 Cisco VPN Client for Solaris 3.5.1 Cisco VPN Client for Mac OS X 4.0.2 C Cisco VPN Client for Mac OS X 4.0.2 A Cisco VPN Client for Mac OS X 3.6.1 Cisco VPN Client for Mac OS X 3.6 Cisco VPN Client for Mac OS X 3.5.4 Cisco VPN Client for Mac OS X 3.5.2 B Cisco VPN Client for Mac OS X 3.5.2 Cisco VPN Client for Mac OS X 3.5.1 Cisco VPN Client for Linux 3.6.1 Cisco VPN Client for Linux 3.6 Cisco VPN Client for Linux 3.5.4 Cisco VPN Client for Linux 3.5.2 B Cisco VPN Client for Linux 3.5.2 Cisco VPN Client for Linux 3.5.1 Cisco VPN 5000 Client for Solaris 5.2.8 Cisco VPN 5000 Client for Solaris 5.2.7 Cisco VPN 5000 Client for Mac OS 5.2.2 Cisco VPN 5000 Client for Mac OS 5.2.1 Cisco VPN 5000 Client for Mac OS 5.1.2 Cisco VPN 5000 Client for Linux 5.2.7 Cisco VPN 5000 Client for Linux 5.2.6 Cisco VPN 3002 Hardware Client Cisco VPN 3000 Concentrator 4.0.1 Cisco VPN 3000 Concentrator 4.0 .x Cisco VPN 3000 Concentrator 4.0 Cisco VPN 3000 Concentrator 3.6.7 D Cisco VPN 3000 Concentrator 3.6.7 Cisco VPN 3000 Concentrator 3.6.1 Cisco VPN 3000 Concentrator 3.6 Cisco VPN 3000 Concentrator 3.5.5 Cisco VPN 3000 Concentrator 3.5.4 Cisco VPN 3000 Concentrator 3.5.3 Cisco VPN 3000 Concentrator 3.5.2 Cisco VPN 3000 Concentrator 3.5.1 Cisco VPN 3000 Concentrator 3.5 (Rel) Cisco VPN 3000 Concentrator 3.1.4 Cisco VPN 3000 Concentrator 3.1.2 Cisco VPN 3000 Concentrator 3.1.1 Cisco VPN 3000 Concentrator 3.1 (Rel) Cisco VPN 3000 Concentrator 3.1 Cisco VPN 3000 Concentrator 3.0.4 Cisco VPN 3000 Concentrator 3.0.3 (B) Cisco VPN 3000 Concentrator 3.0.3 (A) Cisco VPN 3000 Concentrator 3.0 Cisco VPN 3000 Concentrator 3.0 Cisco VPN 3000 Concentrator 2.5.2 (F) Cisco VPN 3000 Concentrator 2.5.2 (D) Cisco VPN 3000 Concentrator 2.5.2 (C) Cisco VPN 3000 Concentrator 2.5.2 (B) Cisco VPN 3000 Concentrator 2.5.2 (A) Cisco VPN 3000 Concentrator 2.0 Certicom MovianVPN

Not Vulnerable: