CVE-2002-1447: Cisco VPN Client

High severity, CVSS 7.2. EPSS: 1.5% chance of exploitation in the next 30 days.

Buffer overflow in the vpnclient program for UNIX VPN Client before 3.5.2 allows local users to gain administrative privileges via a long profile name in a connect argument.

Affected products

• Cisco VPN Client: up to and including 3.5.1

Published 2002-05-28. Last modified 2026-06-16.