Unscored CVE-2002-2139 EUVD-2002-2118GHSA-wvrc-375c-f654

Cisco PIX Firewall 6.0.3 and earlier, and 6.1.x to 6.1.3, do not delete the duplicate ISAKMP SAs for a user's VPN session, which allows loc…

Published Nov 16, 2005 · Updated Sep 17, 2024 · Assigned by mitre

Description

Cisco PIX Firewall 6.0.3 and earlier, and 6.1.x to 6.1.3, do not delete the duplicate ISAKMP SAs for a user's VPN session, which allows local users to hijack a session via a man-in-the-middle attack.

References

20021120 Cisco PIX Multiple Vulnerabilities vendor-advisory
N-017 third-party-advisory government-resource
6211 vdb-entry
cisco-pix-isakmp-sa-mitm(10660) vdb-entry