Unscored DSA-152 2 CVEs

l2tpd - missing random seed

Published Aug 13, 2002 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 3.0	l2tpd	0.67-1.1

Vulnerabilities 2

Unscored —

CVE-2002-0872

l2tpd 0.67 does not initialize the random number generator, which allows remote attackers to hijack sessions.

Apr 2, 2003
Unscored —

CVE-2002-0873

Vulnerability in l2tpd 0.67 allows remote attackers to overwrite the vendor field via a long value in an attribute/valu…

Apr 2, 2003