Vulnerability in Cisco Vpn Client
CVE-2002-0852
Buffer overflows in Cisco Virtual Private Network (VPN) Client 3.5.4 and earlier allows remote attackers to cause a denial of service via (1) an Internet Key Exchange (IKE) with a large Security Parameter Index (SPI) payload, or (2) an IKE packet with a large number of valid payloads.
EPSS: 0.013 (67.5th percentile) — read the EPSS interpretation.
Affected products
- Cisco Vpn_client — versions 3.5.1, 3.5.2
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_CISCO, vendor-advisory, Patch, Vendor Advisory)