Cisco VPN 3000 Concentrator before 2.5.2(F), with encryption enabled, allows remote attackers to cause a denial of service (reload) via a Windows-based PPTP client with the "No Encryption" option set.
Affected Platforms
Cisco Secure Access Control ServerCisco Vpn 3000 Concentrator Series SoftwareCisco Vpn 3002 Hardware Client