l2tpd 0.67 does not initialize the random number generator, which allows remote attackers to hijack sessions.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| L2tpd | L2tpd | 0.62 (including) | 0.62 (including) |
| L2tpd | L2tpd | 0.63 (including) | 0.63 (including) |
| L2tpd | L2tpd | 0.64 (including) | 0.64 (including) |
| L2tpd | L2tpd | 0.65 (including) | 0.65 (including) |
| L2tpd | L2tpd | 0.66 (including) | 0.66 (including) |
| L2tpd | L2tpd | 0.67 (including) | 0.67 (including) |