Skip to content
Noroxi

l2tpd records

3 published records for vendor l2tpd.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
100%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

      The weakness classes this vendor ships most often: where to look.

      CWE

      Attack profile

      All records

      3 records
      • Buffer overflow in write_packet in control.c for l2tpd may allow remote attackers to execute arbitrary code.

        CriticalCVSS 10.0No exploitEPSS 5%

        l2tpd · l2tpdAug 6, 2004

      • CVE-2002-0872
        30Monitor

        l2tpd 0.67 does not initialize the random number generator, which allows remote attackers to hijack sessions.

        HighCVSS 7.5No exploitEPSS 1%

        l2tpd · l2tpdSep 5, 2002

      • CVE-2002-0873
        20Monitor

        Vulnerability in l2tpd 0.67 allows remote attackers to overwrite the vendor field via a long value in an attribute/value pair, possibly via

        MediumCVSS 5.0No exploitEPSS 1%

        l2tpd · l2tpdSep 5, 2002