Cisco VPN Client Elevation of Privilege Vulnerability

Cisco VPN Client is a cross-platform client software suite. Cisco VPN Client fails to properly assign permissions to the vpnclient.ini file, which can be elevated by a local attacker by entering an arbitrary process name into the 'Command' field of the ApplicationLauncher...

Design/Logic Flaw

Cisco VPN Client 5.x through 5.0.07.0440 uses weak permissions for vpnclient.ini, which allows local users to gain privileges by entering an arbitrary program name in the Command field of the ApplicationLauncher section...

CVE-2015-7600: Undefined Security Weakness

Cisco VPN Client 5.x through 5.0.07.0440 uses weak permissions for vpnclient.ini, which allows local users to gain privileges by entering an arbitrary program name in the Command field of the ApplicationLauncher section...

PT-2015-7566

Name of the Vulnerable Software and Affected Versions Cisco VPN Client versions 5.x through 5.0.07.0440 Description The issue allows local users to gain privileges by entering an arbitrary program name in the Command field of the ApplicationLauncher section in the vpnclient.ini file, due to weak...