CVE-2002-1755

Published: Dec 31, 2002Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

tinc 1.0pre3 and 1.0pre4 VPN does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions without detection, and possibly control the data contents via cut-and-paste attacks on CBC.

Affected (2)

Products: Tinc: Tinc

Tinc

1 product

Tinc

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Tinc Tinc	Version 1.0pre3
Tinc Tinc	Version 1.0pre4

References (4)

http://www.securityfocus.com/archive/1/249142

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/7868

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/249142

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/7868

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.