Vulnerability in Maxim Krasnyansky Vtun
CVE-2002-1747
Vtun 2.5b1 does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions without detection, and possibly control the data contents via cut-and-paste attacks on ECB.
EPSS: 0.011 (61.4th percentile) — read the EPSS interpretation.
Affected products
- Maxim_krasnyansky Vtun — versions 2.5b1
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_XF)