CVE-2002-0872: l2tpd

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

l2tpd 0.67 does not initialize the random number generator, which allows remote attackers to hijack sessions.

Affected products

• l2tpd l2tpd: version 0.62 only; version 0.63 only; version 0.64 only; version 0.65 only; version 0.66 only; version 0.67 only

Published 2002-09-05. Last modified 2026-06-16.