PT-2002-2420 · Max Krasnyansky · Vtun

CVE-2002-1697 · Publicado 2002-12-31 · Atualizado 2024-02-14

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions VTun versions 2.0 through 2.5

Description The Electronic Code Book (ECB) mode in VTun uses a weak encryption algorithm that produces the same ciphertext from the same plaintext blocks. This could allow remote attackers to gain sensitive information.

Recommendations For VTun versions 2.0 through 2.5, consider disabling the ECB mode until a patch is available. Restrict access to sensitive information to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Inadequate Encryption Strength

Enumeração de Fraquezas

CWE-326

Identificadores relacionados

CVE-2002-1697

Produtos afetados

Vtun

Referências · 8

• http://seclists.org/bugtraq/2002/Jan/0119.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1697 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2002-1697 · Aviso do Fabricante
• https://t.me/cvenotify/71366 · Publicação no Telegram
• http://securityfocus.com/bid/3845 · Nota
• https://osv.dev/vulnerability/CVE-2002-1697 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7904 · Nota
• https://security-tracker.debian.org/tracker/CVE-2002-1697 · Aviso do Fabricante