CVE-2002-2139: Medium severity Cisco Pix Firewall Software vulnerability
Published Dec 31, 2002
·Updated
Cisco PIX Firewall 6.0.3 and earlier, and 6.1.x to 6.1.3, do not delete the duplicate ISAKMP SAs for a user's VPN session, which allows local users to hijack a session via a man-in-the-middle attack.
Affected Software
7 affected components
Cisco Pix Firewall Software=6.0
Cisco Pix Firewall Software=6.0\(1\)
Cisco Pix Firewall Software=6.0\(2\)
Cisco Pix Firewall Software=6.0\(3\)
Cisco Pix Firewall Software=6.1
Cisco Pix Firewall Software=6.1\(2\)
Cisco Pix Firewall Software=6.1\(3\)
Remediation
Patch Available
Patch Available
Event History
Dec 31, 2002
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
RemedyDescriptionSeverityAffected Software
Nov 16, 2005
CVE Published
via MITRE·09:17 PM
Data Sourced
via MITRE·09:17 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-2139?
CVE-2002-2139 has a medium severity rating, indicating a moderate level of risk in terms of potential exploitation.
2
How do I fix CVE-2002-2139?
To fix CVE-2002-2139, upgrade the Cisco PIX Firewall to the latest version that addresses this vulnerability.
3
What devices are affected by CVE-2002-2139?
CVE-2002-2139 affects Cisco PIX Firewall software versions 6.0.3 and earlier, as well as versions 6.1.x up to 6.1.3.
4
What type of attack is associated with CVE-2002-2139?
CVE-2002-2139 is associated with a man-in-the-middle attack, which allows unauthorized session hijacking.
5
Who is vulnerable to CVE-2002-2139?
Local users with access to the network can exploit CVE-2002-2139 to hijack VPN sessions.