CVE-2002-0426

Severity

75%

Complexity

99%

Confidentiality

106%

VPN Server module in Linksys EtherFast BEFVP41 Cable/DSL VPN Router before 1.40.1 reduces the key lengths for keys that are supplied via manual key entry, which makes it easier for attackers to crack the keys.

VPN Server module in Linksys EtherFast BEFVP41 Cable/DSL VPN Router before 1.40.1 reduces the key lengths for keys that are supplied via manual key entry, which makes it easier for attackers to crack the keys.

CVSS 2.0 Base Score 7.5. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:P/I:P/A:P).

Overview

First reported 22 years ago

2002-08-12 04:00:00

Last updated 16 years ago

2008-09-05 20:27:00

Affected Software

Linksys BEFVP41

References

ftp://ftp.linksys.com/pub/befsr41/befvp41-1402.zip

20020308 Linksys BEFVP41 VPN Server does not follow proper VPN standards

Vendor Advisory

linksys-etherfast-weak-encryption(8397)

Vendor Advisory

4250

Patch, Vendor Advisory

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.