CVEvulnerability

CVE-2002-2139

6.4 MEDIUM Published 2002-12-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2002-12-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N

Description

Cisco PIX Firewall 6.0.3 and earlier, and 6.1.x to 6.1.3, do not delete the duplicate ISAKMP SAs for a user's VPN session, which allows local users to hijack a session via a man-in-the-middle attack.

Affected configurations

• cisco pix firewall software 6.0 • cisco pix firewall software 6.0\(1\) • cisco pix firewall software 6.0\(2\) • cisco pix firewall software 6.0\(3\) • cisco pix firewall software 6.1 • cisco pix firewall software 6.1\(2\) • cisco pix firewall software 6.1\(3\)

References