CVE-2002-1492: Cisco VPN 5000 Client

High severity, CVSS 7.2. EPSS: 1.7% chance of exploitation in the next 30 days.

Buffer overflows in the Cisco VPN 5000 Client before 5.2.7 for Linux, and VPN 5000 Client before 5.2.8 for Solaris, allow local users to gain root privileges via (1) close_tunnel and (2) open_tunnel.

Affected products

• Cisco VPN 5000 Client: version 5.2.6 only; version 5.2.7 only

Published 2003-04-02. Last modified 2026-06-16.