← Database

CVE-2002-1106

HIGH CVSS: 7.5 Published: 2002-10-04 Modified: 2026-06-16

Description

Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.5.1C, does not properly verify that certificate DN fields match those of the certificate from the VPN Concentrator, which allows remote attackers to conduct man-in-the-middle attacks.

Affected Platforms

Cisco Vpn Client

Weakness Type

NVD-CWE-Other

References