full-disclosure - CISCO Pix VPN Group Enumeration

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <f26bc1930607120631y71c1083ay76e7d105f9fe2adc@mail.gmail.com>
Date: Thu Jul 13 02:49:30 2006
From: zqyves.spamtrap at gmail.com (Zed Qyves)
Subject: CISCO Pix VPN Group Enumeration

Andreas,

although I think it is specific to VPN concentrators, this is what I
think you are refering to:

http://www.nta-monitor.com/posts/2005/06/cisco-concentrator-groupname-enumeration-vulnerability.html

and

http://www.nta-monitor.com/posts/2005/01/VPN-Flaws-Whitepaper.pdf

you need ike-scan, available from the aforementioned website as well

ZQ