NetSight
medium5.0

CVE-2002-1108

Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.6(Rel), when configured with all tunnel mode, can be forced into acknowledging a TC…

Impact

Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.6(Rel), when configured with all tunnel mode, can be forced into acknowledging a TCP packet from outside the tunnel.

Affected products

VendorProductAffected versions
CiscoVpn Client
Versions 2.0, 3.0, 3.0.5, 3.1, 3.5.1, 3.5.1c

References