CVE-2002-1108

Published: Oct 4, 2002Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.6(Rel), when configured with all tunnel mode, can be forced into acknowledging a TCP packet from outside the tunnel.

Affected (9)

Products: Cisco: Vpn Client

Cisco

1 product

Vpn Client

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Cisco Vpn Client	Version 2.0
Cisco Vpn Client	Version 3.0.5
Cisco Vpn Client	Version 3.0
Cisco Vpn Client	Version 3.1
Cisco Vpn Client	Version 3.5.1
Cisco Vpn Client	Version 3.5.1
Cisco Vpn Client	Version 3.5.1
Cisco Vpn Client	Version 3.5.1
Cisco Vpn Client	Version 3.5.1c