Vulnerability in Cisco Vpn Client

CVE-2002-1107

Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.5.2B, does not generate sufficiently random numbers, which may make it vulnerable to certain attacks such as spoofing.

EPSS: 0.018 (76.4th percentile) — read the EPSS interpretation.

Affected products

Cisco Vpn_client — versions 2.0, 3.0, 3.0.5
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (x_refsource_CISCO, vendor-advisory, Vendor Advisory)