Lucene search
HistoryOct 14, 2010 - 5:52 a.m.
CVE-2009-5007
cisco
trial client
linux
anyconnect
ssl vpn
symlink attack
nvd
3.3 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:N/I:P/A:P
6.6 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
The Cisco trial client on Linux for Cisco AnyConnect SSL VPN allows local users to overwrite arbitrary files via a symlink attack on unspecified temporary files.
Affected configurations
Node
ciscoanyconnect_ssl_vpnMatch--trial_client
| CPE | Name | Operator | Version |
|---|---|---|---|
| cisco:anyconnect_ssl_vpn | cisco anyconnect ssl vpn | eq | - |
Related
cvelist
cvelist
CVE-2009-5007
2010-10-12 21:00:00
prion
prion
Code injection
2010-10-14 05:52:00
nvd
nvd
CVE-2009-5007
2010-10-14 05:52:19
3.3 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:N/I:P/A:P
6.6 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2009-5007