CVE

Id
6521  
CVE No.
CVE-2002-2139  
Status
Candidate  
Description
Cisco PIX Firewall 6.0.3 and earlier, and 6.1.x to 6.1.3, do not delete the duplicate ISAKMP SAs for a user"s VPN session, which allows local users to hijack a session via a man-in-the-middle attack.  
Phase
Assigned (20051116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
36986 6521 CVE-2002-2139 CISCO:20021120 Cisco PIX Multiple Vulnerabilities  View
36987 6521 CVE-2002-2139 URL:http://www.cisco.com/warp/public/707/pix-multiple-vuln-pub.shtml  View
36988 6521 CVE-2002-2139 CIAC:N-017  View
36989 6521 CVE-2002-2139 URL:http://www.ciac.org/ciac/bulletins/n-017.shtml  View
36990 6521 CVE-2002-2139 BID:6211  View
36991 6521 CVE-2002-2139 URL:http://www.securityfocus.com/bid/6211  View
36992 6521 CVE-2002-2139 XF:cisco-pix-isakmp-sa-mitm(10660)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63957 JVNDB-2002-000284 Cisco PIX Firewall の ISAKMP SA の取り扱いの不備によるセッションハイジャックの脆弱性 ------------ CVE-2002-2139 6521 6.4 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000284.html  View