← Database

CVE-2002-2139

MEDIUM CVSS: 6.4 Published: 2002-12-31 Modified: 2026-06-16

Description

Cisco PIX Firewall 6.0.3 and earlier, and 6.1.x to 6.1.3, do not delete the duplicate ISAKMP SAs for a user's VPN session, which allows local users to hijack a session via a man-in-the-middle attack.

Affected Platforms

Cisco Pix Firewall Software

Weakness Type

NVD-CWE-Other

References