C-Note-06-011: Cisco VPN 3000 Concentrator Vulnerable to Crafted HTTP Attack (04/26/2006)
Cisco has updated to include DDTS CSCsd26340.

CIAC would like to thank Cisco for this information. Please visit their web site to read the article:

http://www.cisco.com/warp/public/707/cisco-sa-20060126-vpn.shtml