CVE-2002-1107: High severity Cisco VPN Client vulnerability
Published Oct 4, 2002
·Updated
Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.5.2B, does not generate sufficiently random numbers, which may make it vulnerable to certain attacks such as spoofing.
Affected Software
13 affected components
Cisco VPN Client=3.5.1c
Cisco VPN Client=3.1
Cisco VPN Client=3.5.1
Cisco VPN Client=3.5.2
Cisco VPN Client=3.5.1
Cisco VPN Client=3.0
Cisco VPN Client=3.5.2
Cisco VPN Client=3.5.1
Cisco VPN Client=3.5.2
Cisco VPN Client=2.0
Cisco VPN Client=3.0.5
Cisco VPN Client=3.5.2
Cisco VPN Client=3.5.1
Event History
Oct 4, 2002
CVE Published
04:00 AM
Sep 1, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-1107?
CVE-2002-1107 is considered a high severity vulnerability due to its potential for spoofing attacks.
2
How do I fix CVE-2002-1107?
To mitigate CVE-2002-1107, upgrade to Cisco VPN Client version 3.5.2B or later.
3
Which versions of Cisco VPN Client are affected by CVE-2002-1107?
CVE-2002-1107 affects versions 2.0 and 3.x of Cisco VPN Client prior to 3.5.2B.
4
What is the primary issue with CVE-2002-1107?
The primary issue with CVE-2002-1107 is the inability of the software to generate sufficiently random numbers.
5
What types of attacks can CVE-2002-1107 potentially allow?
CVE-2002-1107 may allow attackers to perform spoofing attacks due to weak random number generation.