Security Advisory

CVE-2002-1106

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2004-09-01 04:00:00

Last updated 2024-08-08 03:12:16

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.5.1C, does not properly verify that certificate DN fields match those of the certificate from the VPN Concentrator, which allows remote attackers to conduct man-in-the-middle attacks.

← Browse all CVEs View on cve.org ↗