CVE-2002-1755 in tinc
Summary
tinc 1.0pre3 and 1.0pre4 VPN does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions without detection, and possibly control the data contents via cut-and-paste attacks on CBC.
Reservation
06/21/2005
Disclosure
12/31/2002
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 19398 | tinc Forwarded Packet missing encryption | 311 | Not defined | Not defined | CVE-2002-1755 |