Security Advisory

CVE-2002-2139

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2005-11-16 21:17:00
Last updated 2024-09-17 03:27:45
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Cisco PIX Firewall 6.0.3 and earlier, and 6.1.x to 6.1.3, do not delete the duplicate ISAKMP SAs for a user's VPN session, which allows local users to hijack a session via a man-in-the-middle attack.