Lucene search
PRIOn knowledge basePRION:CVE-2011-2678HistoryJul 07, 2011 - 7:55 p.m.
Code injection
2011-07-0719:55:00
PRIOn knowledge base
www.prio-n.com
1
The Cisco VPN Client 5.0.7.0240 and 5.0.7.0290 on 64-bit Windows platforms uses weak permissions (NT AUTHORITY\INTERACTIVE:F) for cvpnd.exe, which allows local users to gain privileges by replacing this executable file with an arbitrary program, aka Bug ID CSCtn50645. NOTE: this vulnerability exists because of a CVE-2007-4415 regression.
| CPE | Name | Operator | Version |
|---|---|---|---|
| vpn_client | eq | 5.0.7.0240 | |
| vpn_client | eq | 5.0.7.0290 |
Related
nvd
nvd
CVE-2011-2678
2011-07-07 19:55:03
CVE-2007-4415
2007-08-18 21:17:00
cvelist
cvelist
CVE-2011-2678
2011-07-07 19:00:00
CVE-2007-4415
2007-08-18 21:00:00
cve
cve
CVE-2011-2678
2011-07-07 19:55:03
CVE-2007-4415
2007-08-18 21:17:00
prion
prion
Code injection
2007-08-18 21:17:00
nessus
nessus
Cisco VPN Client cvpnd.exe Privilege Escalation
2011-07-12 00:00:00
cisco
cisco
Local Privilege Escalation Vulnerabilities in Cisco VPN Client
2007-08-15 16:00:00