Unscored severity · published Dec 31, 2002
CVE-2002-1747
Vtun 2.5b1 does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions without detection, and possibly control the data contents via…
–
CVSS
1.1%
EPSS
No
On KEV
Description
Vtun 2.5b1 does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions without detection, and possibly control the data contents via cut-and-paste attacks on ECB.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 65% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VT
Vtun · Maxim Krasnyansky
2.5b1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-1747
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-1747
seclists.org
http://seclists.org/bugtraq/2002/Jan/0119.html
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/7868
More from Vtun
–
CVE-2002-1746
Vtun 2.5b1 allows remote attackers to inject data into user sessions by sniffing and replaying packets