Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.5
CVSSv2

CVE-2002-0872

Published: 05/09/2002 Updated: 10/09/2008
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

l2tpd 0.67 does not initialize the random number generator, which allows remote malicious users to hijack sessions.

Vulnerable Product Search on Vulmon Subscribe to Product

l2tpd l2tpd 0.62

l2tpd l2tpd 0.64

l2tpd l2tpd 0.66

l2tpd l2tpd 0.67

l2tpd l2tpd 0.63

l2tpd l2tpd 0.65

Vendor Advisories

Debian Security Advisories: DSA-152-1 l2tpd -- missing random seed
Current versions of l2tpd, a layer 2 tunneling client/server program, forgot to initialize the random generator which made it vulnerable since all generated random number were 100% guessable When dealing with the size of the value in an attribute value pair, too many bytes were able to be copied, which could lead into the vendor field being overwr ...

References

NVD-CWE-Otherhttp://www.debian.org/security/2002/dsa-152http://www.securityfocus.com/bid/5451http://www.iss.net/security_center/static/9845.phphttps://nvd.nist.govhttps://www.debian.org/security/./dsa-152
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-30310CVE-2024-21683CVE-2024-22187chromedeserializationXPath injectionCVE-2024-27842denial of serviceCVE-2024-24851googleCVE-2024-35400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook