Vulnerability in L2tpd

CVE-2002-0872

l2tpd 0.67 does not initialize the random number generator, which allows remote attackers to hijack sessions.

EPSS: 0.016 (73.5th percentile) — read the EPSS interpretation.

Affected products

  • L2tpd — versions 0.62, 0.63, 0.64
  • N/a — versions n/a

References