NetSight
high7.5

CVE-2002-0872

l2tpd 0.67 does not initialize the random number generator, which allows remote attackers to hijack sessions.

Impact

l2tpd 0.67 does not initialize the random number generator, which allows remote attackers to hijack sessions.

Affected products

VendorProductAffected versions
L2tpdL2tpd
Versions 0.62, 0.63, 0.64, 0.65, 0.66, 0.67

References