CVE-2007-4415
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
18/08/2007
Last modified:
15/10/2018
Description
Cisco VPN Client on Windows before 5.0.01.0600, and the 5.0.01.0600 InstallShield (IS) release, uses weak permissions for cvpnd.exe (Modify granted to Interactive Users), which allows local users to gain privileges via a modified cvpnd.exe.
Impact
Base Score 2.0
6.80
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:cisco:vpn_client:*:*:windows:*:*:*:*:* | 5.0.01 (including) | |
cpe:2.3:a:cisco:vpn_client:5.0.01.0600:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://secunia.com/advisories/26459
- http://securityreason.com/securityalert/3023
- http://securitytracker.com/id?1018573=
- http://www.cisco.com/warp/public/707/cisco-sa-20070815-vpnclient.shtml
- http://www.securityfocus.com/archive/1/476812/100/0/threaded
- http://www.securityfocus.com/bid/25332
- http://www.vupen.com/english/advisories/2007/2903
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36032