p PatchFirst

CVE-2002-1755

CVE-2002-1755

This page contains facts from public vulnerability sources. Check the original advisory before updating.

tinc 1.0pre3 and 1.0pre4 VPN does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions without detection, and possibly control the data contents via cut-and-paste attacks on CBC.

EPSS 1.1% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • tinc Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.0pre5

    Update to 1.0pre5

  • tinc Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.0pre5

    Update to 1.0pre5

  • tinc Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.0pre5

    Update to 1.0pre5

Original sources

Check your server →