CVE-2002-0873: l2tpd

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

Vulnerability in l2tpd 0.67 allows remote attackers to overwrite the vendor field via a long value in an attribute/value pair, possibly via a buffer overflow.

Affected products

• l2tpd l2tpd: version 0.62 only; version 0.63 only; version 0.64 only; version 0.65 only; version 0.66 only; version 0.67 only

Published 2002-09-05. Last modified 2026-06-16.