CVE-2002-0872

Fixed in a distro release EPSS 2%

l2tpd 0.67 does not initialize the random number generator, which allows remote attackers to hijack sessions.

Published 2003-04-02 · CVE record · OSV

Products: l2tpd

Distro releases