Lucene search

[email protected]CVE-2009-4118

HistoryOct 03, 2022 - 4:24 p.m.

CVE-2009-4118

2022-10-0316:24:03

[email protected]

web.nvd.nist.gov

cve-2009-4118

cisco vpn

windows

denial of service

vulnerability

6.2 Medium

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

0.003 Low

EPSS

Percentile

65.0%

JSON

The StartServiceCtrlDispatcher function in the cvpnd service (cvpnd.exe) in Cisco VPN client for Windows before 5.0.06.0100 does not properly handle an ERROR_FAILED_SERVICE_CONTROLLER_CONNECT error, which allows local users to cause a denial of service (service crash and VPN connection loss) via a manual start of cvpnd.exe while the cvpnd service is running.

Affected configurations

NVD

Node

ciscovpn_clientMatch2.0windows

ciscovpn_clientMatch3.0windows

ciscovpn_clientMatch3.0.5windows

ciscovpn_clientMatch3.1windows

ciscovpn_clientMatch3.5.1windows

ciscovpn_clientMatch3.5.1cwindows

ciscovpn_clientMatch3.5.2windows

ciscovpn_clientMatch3.6.5basewindows

ciscovpn_clientMatch4.7.00.0000windows

ciscovpn_clientMatch4.8.00.0000windows

ciscovpn_clientMatch4.8.00.0440windows

ciscovpn_clientMatch4.8.1windows

ciscovpn_clientMatch4.8.01basewindows

ciscovpn_clientMatch4.8.02.0010basewindows

ciscovpn_clientMatch4.9basewindows

ciscovpn_clientMatch5.0.00.340basewindows

ciscovpn_clientMatch5.0.01windows

ciscovpn_clientMatch5.0.01.0600basewindows

ciscovpn_clientMatch5.0.2.0090windows

ciscovpn_clientMatch5.0.02.0090basewindows

ciscovpn_clientMatch0490basewindows

CPENameOperatorVersion
cisco:vpn_clientcisco vpn clienteq2.0
cisco:vpn_clientcisco vpn clienteq3.0
cisco:vpn_clientcisco vpn clienteq3.0.5
cisco:vpn_clientcisco vpn clienteq3.1
cisco:vpn_clientcisco vpn clienteq3.5.1
cisco:vpn_clientcisco vpn clienteq3.5.1c
cisco:vpn_clientcisco vpn clienteq3.5.2
cisco:vpn_clientcisco vpn clienteq3.6.5
cisco:vpn_clientcisco vpn clienteq4.7.00.0000
cisco:vpn_clientcisco vpn clienteq4.8.00.0000

CPE	Name	Operator	Version
cisco:vpn_client	cisco vpn client	eq	2.0
cisco:vpn_client	cisco vpn client	eq	3.0
cisco:vpn_client	cisco vpn client	eq	3.0.5
cisco:vpn_client	cisco vpn client	eq	3.1
cisco:vpn_client	cisco vpn client	eq	3.5.1
cisco:vpn_client	cisco vpn client	eq	3.5.1c
cisco:vpn_client	cisco vpn client	eq	3.5.2
cisco:vpn_client	cisco vpn client	eq	3.6.5
cisco:vpn_client	cisco vpn client	eq	4.7.00.0000
cisco:vpn_client	cisco vpn client	eq	4.8.00.0000