Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 07/07/2011 Updated: 09/10/2018

CVSS v2 Base Score: 6.8 | Impact Score: 10 | Exploitability Score: 3.1

VMScore: 605

Vector: AV:L/AC:L/Au:S/C:C/I:C/A:C

The Cisco VPN Client 5.0.7.0240 and 5.0.7.0290 on 64-bit Windows platforms uses weak permissions (NT AUTHORITY\INTERACTIVE:F) for cvpnd.exe, which allows local users to gain privileges by replacing this executable file with an arbitrary program, aka Bug ID CSCtn50645. NOTE: this vulnerability exists because of a CVE-2007-4415 regression.

Vulnerable Product	Search on Vulmon	Subscribe to Product
cisco vpn_client 5.0.7.0240
cisco vpn_client 5.0.7.0290

NVD-CWE-Other http://www.cisco.com/warp/public/707/cisco-sa-20070815-vpnclient.shtml http://isc.sans.edu/diary.html?storyid=11125 http://securityreason.com/securityalert/8297 https://exchange.xforce.ibmcloud.com/vulnerabilities/68485 http://www.securityfocus.com/archive/1/518638/100/0/threaded https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2011-2678

Vulnerability Summary

References

Vulmon Search

About

Products

Connect