CVE-2002-0852: Cisco VPN Client

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

Buffer overflows in Cisco Virtual Private Network (VPN) Client 3.5.4 and earlier allows remote attackers to cause a denial of service via (1) an Internet Key Exchange (IKE) with a large Security Parameter Index (SPI) payload, or (2) an IKE packet with a large number of valid payloads.

Affected products

• Cisco VPN Client: version 3.5.1 only; version 3.5.2 only

Published 2002-09-05. Last modified 2026-06-16.