Lucene search
PRIOn knowledge basePRION:CVE-2007-4415HistoryAug 18, 2007 - 9:17 p.m.
Code injection
2007-08-1821:17:00
PRIOn knowledge base
www.prio-n.com
5
Cisco VPN Client on Windows before 5.0.01.0600, and the 5.0.01.0600 InstallShield (IS) release, uses weak permissions for cvpnd.exe (Modify granted to Interactive Users), which allows local users to gain privileges via a modified cvpnd.exe.
| CPE | Name | Operator | Version |
|---|---|---|---|
| vpn_client | le | 5.0.01 | |
| vpn_client | eq | 5.0.01.0600 |
References
secunia.com/advisories/26459
securityreason.com/securityalert/3023
securitytracker.com/id?1018573
www.cisco.com/warp/public/707/cisco-sa-20070815-vpnclient.shtml
www.securityfocus.com/archive/1/476812/100/0/threaded
www.securityfocus.com/bid/25332
www.vupen.com/english/advisories/2007/2903
exchange.xforce.ibmcloud.com/vulnerabilities/36032
Related
cve
cve
CVE-2007-4415
2007-08-18 21:17:00
CVE-2011-2678
2011-07-07 19:55:03
cvelist
cvelist
CVE-2007-4415
2007-08-18 21:00:00
CVE-2011-2678
2011-07-07 19:00:00
nessus
nessus
Cisco VPN Client cvpnd.exe Privilege Escalation
2011-07-12 00:00:00
nvd
nvd
CVE-2007-4415
2007-08-18 21:17:00
CVE-2011-2678
2011-07-07 19:55:03
prion
prion
Code injection
2011-07-07 19:55:00
cisco
cisco
Local Privilege Escalation Vulnerabilities in Cisco VPN Client
2007-08-15 16:00:00