2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2002-1107" ,
"sourceIdentifier" : "cve@mitre.org" ,
"published" : "2002-10-04T04:00:00.000" ,
"lastModified" : "2017-10-10T01:30:08.453" ,
"vulnStatus" : "Modified" ,
2024-07-14 02:06:08 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.5.2B, does not generate sufficiently random numbers, which may make it vulnerable to certain attacks such as spoofing."
}
] ,
"metrics" : {
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P" ,
"accessVector" : "NETWORK" ,
"accessComplexity" : "LOW" ,
"authentication" : "NONE" ,
"confidentialityImpact" : "PARTIAL" ,
"integrityImpact" : "PARTIAL" ,
"availabilityImpact" : "PARTIAL" ,
"baseScore" : 7.5
} ,
"baseSeverity" : "HIGH" ,
"exploitabilityScore" : 10.0 ,
"impactScore" : 6.4 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : true ,
"userInteractionRequired" : false
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "NVD-CWE-Other"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cisco:vpn_client:2.0:*:windows:*:*:*:*:*" ,
"matchCriteriaId" : "398B68C7-C1DB-4A62-B0A2-89C917768E58"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cisco:vpn_client:3.0:*:windows:*:*:*:*:*" ,
"matchCriteriaId" : "20C66C87-1367-4440-A2C2-E6B657DA2743"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cisco:vpn_client:3.0.5:*:windows:*:*:*:*:*" ,
"matchCriteriaId" : "D4BFB291-672C-437E-BBF4-B00D89C11EA9"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cisco:vpn_client:3.1:*:windows:*:*:*:*:*" ,
"matchCriteriaId" : "4A270D7C-ACBC-41A4-A606-8A4F35894E74"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cisco:vpn_client:3.5.1:*:linux:*:*:*:*:*" ,
"matchCriteriaId" : "2BD00D0A-EB6E-41AA-851D-9DD258E23BEA"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cisco:vpn_client:3.5.1:*:mac_os_x:*:*:*:*:*" ,
"matchCriteriaId" : "3FB66EB9-9FE9-4B13-9E5F-E9DEDCD0E3C3"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cisco:vpn_client:3.5.1:*:solaris:*:*:*:*:*" ,
"matchCriteriaId" : "88EB557F-33CD-40FE-B470-04F93CB2F3E3"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cisco:vpn_client:3.5.1:*:windows:*:*:*:*:*" ,
"matchCriteriaId" : "59938F7D-5F64-4FC0-A5B2-C798AF297130"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cisco:vpn_client:3.5.1c:*:windows:*:*:*:*:*" ,
"matchCriteriaId" : "76060A99-ED0C-4125-B67E-FA8E4F57AAB5"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cisco:vpn_client:3.5.2:*:linux:*:*:*:*:*" ,
"matchCriteriaId" : "F2EEB23E-4592-49A1-BDC6-110580340AAD"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cisco:vpn_client:3.5.2:*:mac_os_x:*:*:*:*:*" ,
"matchCriteriaId" : "D548CEFE-1970-42D3-9039-196A3B5F5D0B"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cisco:vpn_client:3.5.2:*:solaris:*:*:*:*:*" ,
"matchCriteriaId" : "2D4BDB9B-99D8-42B7-8D57-2B57029220F1"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cisco:vpn_client:3.5.2:*:windows:*:*:*:*:*" ,
"matchCriteriaId" : "2288FB91-4607-417D-8658-E1B8090BE40A"
}
]
}
]
}
] ,
"references" : [
{
"url" : "http://www.cisco.com/warp/public/707/vpnclient-multiple2-vuln-pub.shtml" ,
"source" : "cve@mitre.org" ,
"tags" : [
"Vendor Advisory"
]
} ,
{
"url" : "http://www.securityfocus.com/bid/5653" ,
"source" : "cve@mitre.org" ,
"tags" : [
"Vendor Advisory"
]
} ,
{
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/10046" ,
"source" : "cve@mitre.org"
}
]
}