Vulnerability in Cisco Vpn Client
CVE-2002-1106
Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.5.1C, does not properly verify that certificate DN fields match those of the certificate from the VPN Concentrator, which allows remote attackers to conduct man-in-the-middle attacks.
EPSS: 0.010 (57.7th percentile) — read the EPSS interpretation.
Affected products
- Cisco Vpn_client — versions 2.0, 3.0, 3.1
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (vdb-entry, x_refsource_BID, Vendor Advisory)