CVE-2002-0853

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Cisco Virtual Private Network (VPN) Client 3.5.4 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a packet with a zero-length payload.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.cisco.com/warp/public/707/vpnclient-multiple-vuln-pub.shtmlPatch, Vendor Advisory
http://www.iss.net/security_center/static/9821.php
http://www.kb.cert.org/vuls/id/287771US Government Resource
http://www.securityfocus.com/bid/5440
http://www.cisco.com/warp/public/707/vpnclient-multiple-vuln-pub.shtmlPatch, Vendor Advisory
http://www.iss.net/security_center/static/9821.php
http://www.kb.cert.org/vuls/id/287771US Government Resource
http://www.securityfocus.com/bid/5440

Timeline

Published: Sep 5, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-08547.2Buffer overflows in ISDN Point to Point Protocol (PPP) daemon (ipppd) in the i4l package on SuSE 7.3, 8.0, and possibly other operating syst CVE-2002-08557.5Cross-site scripting vulnerability in Mailman before 2.0.12 allows remote attackers to execute script as other users via a subscriber's list CVE-2002-08565.0SQL*NET listener for Oracle Net Oracle9i 9.0.x and 9.2 allows remote attackers to cause a denial of service (crash) via certain debug reques CVE-2002-08577.5Format string vulnerabilities in Oracle Listener Control utility (lsnrctl) for Oracle 9.2 and 9.0, 8.1, and 7.3.4, allow remote attackers to CVE-2002-08587.5catsnmp in Oracle 9i and 8i is installed with a dbsnmp user with a default dbsnmp password, which allows attackers to perform restricted dat CVE-2002-08597.5Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000 allows remote attackers to execute arbitrary c CVE-2002-08605.0The LoadText method in the spreadsheet component in Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to read arbi CVE-2002-08617.5Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to bypass the "Allow paste operations via script" setting, even CVE-2002-08626.8The (1) CertGetCertificateChain, (2) CertVerifyCertificateChainPolicy, and (3) WinVerifyTrust APIs within the CryptoAPI for Microsoft produc CVE-2002-08635.0Remote Data Protocol (RDP) version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext sessi CVE-2002-08645.0The Remote Data Protocol (RDP) version 5.1 in Microsoft Windows XP allows remote attackers to cause a denial of service (crash) when Remote CVE-2002-08657.5A certain class that supports XML (Extensible Markup Language) in Microsoft Virtual Machine (VM) 5.0.3805 and earlier, probably com.ms.osp.o