Lucene search
HistorySep 05, 2002 - 4:00 a.m.
CVE-2002-0872
cve-2002-0872
l2tpd
session hijack
security
nvd
6.8 Medium
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.012 Low
EPSS
Percentile
85.2%
l2tpd 0.67 does not initialize the random number generator, which allows remote attackers to hijack sessions.
| CPE | Name | Operator | Version |
|---|---|---|---|
| l2tpd:l2tpd | l2tpd | eq | 0.64 |
| l2tpd:l2tpd | l2tpd | eq | 0.65 |
| l2tpd:l2tpd | l2tpd | eq | 0.62 |
| l2tpd:l2tpd | l2tpd | eq | 0.66 |
| l2tpd:l2tpd | l2tpd | eq | 0.63 |
| l2tpd:l2tpd | l2tpd | eq | 0.67 |
Related
nessus
nessus
Debian DSA-152-1 : l2tpd - missing random seed
2004-09-29 00:00:00
l2tpd < 0.68 Multiple Vulnerabilities
2003-03-14 00:00:00
openvas
openvas
Debian Security Advisory DSA 152-1 (l2tpd)
2008-01-17 00:00:00
Debian Security Advisory DSA 152-1 (l2tpd)
2008-01-17 00:00:00
osv
osv
l2tpd - missing random seed
2002-08-13 00:00:00
6.8 Medium
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.012 Low
EPSS
Percentile
85.2%
Related for CVE-2002-0872