CVE-2002-1106
N/A
N/A
Summary
Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.5.1C, does not properly verify that certificate DN fields match those of the certificate from the VPN Concentrator, which allows remote attackers to conduct man-in-the-middle attacks.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://www.cisco.com/warp/public/707/vpnclient-multiple2-vuln-pub.shtml
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10045
- http://www.securityfocus.com/bid/5652
References
- http://www.cisco.com/warp/public/707/vpnclient-multiple2-vuln-pub.shtml
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10045
- http://www.securityfocus.com/bid/5652
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.