Back to search
CVE-2007-4415
Published: Aug 18, 2007
Modified: Aug 7, 2024
PUBLISHED
Description
Cisco VPN Client on Windows before 5.0.01.0600, and the 5.0.01.0600 InstallShield (IS) release, uses weak permissions for cvpnd.exe (Modify granted to Interactive Users), which allows local users to gain privileges via a modified cvpnd.exe.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
20070816 Local privilege escalation vulnerability in Cisco VPN client
mailing-list
x_refsource_BUGTRAQ
20070815 Local Privilege Escalation Vulnerabilities in Cisco VPN Client
vendor-advisory
x_refsource_CISCO
ADV-2007-2903
vdb-entry
x_refsource_VUPEN
3023
third-party-advisory
x_refsource_SREASON
26459
third-party-advisory
x_refsource_SECUNIA
25332
vdb-entry
x_refsource_BID
1018573
vdb-entry
x_refsource_SECTRACK
cisco-vpn-cvpnd-privilege-escalation(36032)
vdb-entry
x_refsource_XF
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now