Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

Remotely exploitable vulnerabilities in l2tpd

Package(s):

l2tpd

CVE #(s):

Created:

August 14, 2002

Updated:

August 14, 2002

Description:

l2tpd, a layer 2 tunneling client/server program, does not initialize the random generator. Since this makes all generated random number 100% guessable, the oversight could lead to remote exploits. There is also a buffer overflow vulnerability. Both problems are fixed in the updates below.

Alerts:

Debian

DSA-152-1

2002-08-13

(Log in to post comments)