CVE-2002-1747 Vtun 2.5b1 does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions without detection, and possibly control the data contents via cut-and-paste attacks....
MediumCVSS 5.0
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Vtun 2.5b1 does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions without detection, and possibly control the data contents via cut-and-paste attacks on ECB.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| maxim krasnyansky vtun | = 2.5b1 | No fix listed |
| debian/vtun(Debian:12) | < 2.5b2 | 2.5b2 |
References
- 20020109 Security weaknesses of VTun mailing-list
- vpn-modify-packets(7868) vdb-entry
- Debian Security Tracker CVE-2002-1747 vendor-advisory