OSVDB ID: 25888

Title: Cisco VPN Client Dialer Local Privilege Escalation

Info

Disclosure

May 24, 2006

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Cisco VPN Client for Windows contains an unspecified flaw related to the VPN Dialer that may allow a user to gain access to unauthorized privileges via privilege escalation. No further details have been provided.

Classification

Location: Local Access Required
Attack Type: Other
Impact: Loss of Integrity
Exploit: Exploit Unknown
Disclosure: OSVDB Verified

Solution

Upgrade to version 4.8.01.0300 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Cisco Systems, Inc.

VPN Client for Windows

2.x
3.x
4.0.x
4.6.x
4.7.x
4.8.00.x

References

Credit

  • Andrew Christensen - FortConsult
  • Johan Ronkainen -


Direct URL: http://osvdb.org/25888