{"id":"CVE-2002-1094","aliases":["EUVD-2002-1082","GHSA-2jpc-hvvc-26mm"],"status":"published","title":"Information leaks in Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.5.4 allow remote...","description":"Information leaks in Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.5.4 allow remote attackers to obtain potentially sensitive information via the (1) SSH banner, (2) FTP banner, or (3) an incorrect HTTP request.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.0158,"percentile":0.75674,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2002-09-10T04:00:00Z","modified":"2026-06-16T21:58:42Z","products":[{"vendor":"cisco","product":"vpn_3000_concentrator_series_software"},{"vendor":"cisco","product":"vpn_3002_hardware_client"}],"references":[{"url":"http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10020.php","tags":["vdb-entry","x_refsource_XF","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5624","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.securityfocus.com/bid/5621","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.securityfocus.com/bid/5623","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2002-1094"},{"url":"https://github.com/advisories/GHSA-2jpc-hvvc-26mm"}],"sources":{"cve":[{"id":"CVE-2002-1094","description":"Information leaks in Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.5.4 allow remote attackers to obtain potentially sensitive information via the (1) SSH banner, (2) FTP banner, or (3) an incorrect HTTP request.","status":"published","published":"2002-09-10T04:00:00Z","modified":"2024-08-08T03:12:17.032Z","updated_at":"2026-11-02T14:33:54.641433Z"}],"euvd":[{"id":"EUVD-2002-1082","description":"Information leaks in Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.5.4 allow remote attackers to obtain potentially sensitive information via the (1) SSH banner, (2) FTP banner, or (3) an incorrect HTTP request.","status":"published","published":"2002-09-10T04:00:00Z","modified":"2024-08-08T03:12:17Z","updated_at":"2026-11-03T01:14:57.683744Z"}],"ghsa":[{"id":"GHSA-2jpc-hvvc-26mm","title":"Information leaks in Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.5.4 allow remote...","description":"Information leaks in Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.5.4 allow remote attackers to obtain potentially sensitive information via the (1) SSH banner, (2) FTP banner, or (3) an incorrect HTTP request.","status":"published","published":"2022-04-30T18:20:31Z","modified":"2023-01-30T05:06:21Z","updated_at":"2026-11-02T14:47:28.633261Z"}],"nvd":[{"id":"CVE-2002-1094","description":"Information leaks in Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.5.4 allow remote attackers to obtain potentially sensitive information via the (1) SSH banner, (2) FTP banner, or (3) an incorrect HTTP request.","status":"published","published":"2002-10-04T04:00:00Z","modified":"2026-06-16T21:58:42.863Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:00:42.827505Z"}]}}