CVE-2002-1755

tinc 1.0pre3 and 1.0pre4 VPN does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions without detection, and…

published June 21, 2005

CVSS
—
EPSS
1%
Percentile
65.1
In the wild
Unconfirmed
What it is

tinc 1.0pre3 and 1.0pre4 VPN does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions without detection, and possibly control the data contents via cut-and-paste attacks on CBC.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01096 · 65.1th percentile
Published
2005-06-21T04:00Z
EPSS history
Timeline
  • 21 JUN 04:00Z
    tinc 1.0pre3 and 1.0pre4 VPN does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions without detection, and…
    cvelistv5