CVEvulnerability
CVE-2002-1106
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2002-10-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.5.1C, does not properly verify that certificate DN fields match those of the certificate from the VPN Concentrator, which allows remote attackers to conduct man-in-the-middle attacks.
Affected configurations
• cisco vpn client 2.0
• cisco vpn client 3.0
• cisco vpn client 3.1
• cisco vpn client 3.5.1
References
- http://www.cisco.com/warp/public/707/vpnclient-multiple2-vuln-pub.shtml Vendor Advisory
- http://www.securityfocus.com/bid/5652 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10045 exchange.xforce.ibmcloud.com
- http://www.cisco.com/warp/public/707/vpnclient-multiple2-vuln-pub.shtml Vendor Advisory
- http://www.securityfocus.com/bid/5652 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10045 exchange.xforce.ibmcloud.com