tinc 1.0pre3 and 1.0pre4 VPN does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions without detection, and possibly control the data contents via cut-and-paste attacks on CBC.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Tinc | Tinc | 1.0pre3 (including) | 1.0pre3 (including) |
| Tinc | Tinc | 1.0pre4 (including) | 1.0pre4 (including) |