Lucene search

[email protected]CVE-2009-4118

HistoryOct 03, 2022 - 4:24 p.m.

CVE-2009-4118

2022-10-0316:24:03

[email protected]

web.nvd.nist.gov

cve-2009-4118

cisco vpn

windows

denial of service

vulnerability

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

6.2 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.2%

JSON

The StartServiceCtrlDispatcher function in the cvpnd service (cvpnd.exe) in Cisco VPN client for Windows before 5.0.06.0100 does not properly handle an ERROR_FAILED_SERVICE_CONTROLLER_CONNECT error, which allows local users to cause a denial of service (service crash and VPN connection loss) via a manual start of cvpnd.exe while the cvpnd service is running.

Affected configurations

NVD

Node

ciscovpn_clientMatch2.0windows

ciscovpn_clientMatch3.0windows

ciscovpn_clientMatch3.0.5windows

ciscovpn_clientMatch3.1windows

ciscovpn_clientMatch3.5.1windows

ciscovpn_clientMatch3.5.1cwindows

ciscovpn_clientMatch3.5.2windows

ciscovpn_clientMatch3.6.5basewindows

ciscovpn_clientMatch4.7.00.0000windows

ciscovpn_clientMatch4.8.00.0000windows

ciscovpn_clientMatch4.8.00.0440windows

ciscovpn_clientMatch4.8.1windows

ciscovpn_clientMatch4.8.01basewindows

ciscovpn_clientMatch4.8.02.0010basewindows

ciscovpn_clientMatch4.9basewindows

ciscovpn_clientMatch5.0.00.340basewindows

ciscovpn_clientMatch5.0.01windows

ciscovpn_clientMatch5.0.01.0600basewindows

ciscovpn_clientMatch5.0.2.0090windows

ciscovpn_clientMatch5.0.02.0090basewindows

ciscovpn_clientMatch0490basewindows

CPENameOperatorVersion
cisco:vpn_clientcisco vpn clienteq2.0
cisco:vpn_clientcisco vpn clienteq3.0
cisco:vpn_clientcisco vpn clienteq3.0.5
cisco:vpn_clientcisco vpn clienteq3.1
cisco:vpn_clientcisco vpn clienteq3.5.1
cisco:vpn_clientcisco vpn clienteq3.5.1c
cisco:vpn_clientcisco vpn clienteq3.5.2
cisco:vpn_clientcisco vpn clienteq3.6.5
cisco:vpn_clientcisco vpn clienteq4.7.00.0000
cisco:vpn_clientcisco vpn clienteq4.8.00.0000

CPE	Name	Operator	Version
cisco:vpn_client	cisco vpn client	eq	2.0
cisco:vpn_client	cisco vpn client	eq	3.0
cisco:vpn_client	cisco vpn client	eq	3.0.5
cisco:vpn_client	cisco vpn client	eq	3.1
cisco:vpn_client	cisco vpn client	eq	3.5.1
cisco:vpn_client	cisco vpn client	eq	3.5.1c
cisco:vpn_client	cisco vpn client	eq	3.5.2
cisco:vpn_client	cisco vpn client	eq	3.6.5
cisco:vpn_client	cisco vpn client	eq	4.7.00.0000
cisco:vpn_client	cisco vpn client	eq	4.8.00.0000