PT-2002-2420 · Max Krasnyansky · Vtun

Published 2002-12-31 · Updated 2024-02-14 · CVE-2002-1697

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions VTun versions 2.0 through 2.5

Description The Electronic Code Book (ECB) mode in VTun uses a weak encryption algorithm that produces the same ciphertext from the same plaintext blocks. This could allow remote attackers to gain sensitive information.

Recommendations For VTun versions 2.0 through 2.5, consider disabling the ECB mode until a patch is available. Restrict access to sensitive information to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Inadequate Encryption Strength

Weakness Enumeration

CWE-326

Related Identifiers

CVE-2002-1697

Affected Products

Vtun

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2002-1697 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2002-1697 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2002-1697 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2002-1697 · Vendor Advisory
• http://seclists.org/bugtraq/2002/Jan/0119.html · Note
• https://t.me/cvenotify/71366 · Telegram Post
• http://securityfocus.com/bid/3845 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7904 · Note