CVE-2007-4415

EPSS 0.05%
Veröffentlicht 18.08.2007 21:17:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Cisco VPN Client on Windows before 5.0.01.0600, and the 5.0.01.0600 InstallShield (IS) release, uses weak permissions for cvpnd.exe (Modify granted to Interactive Users), which allows local users to gain privileges via a modified cvpnd.exe.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 11

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Vpn Client Editionwindows Version <= 5.0.01

Cisco ≫ Vpn Client Version5.0.01.0600

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.05%	0.112

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.8	3.1	10	AV:L/AC:L/Au:S/C:C/I:C/A:C

http://secunia.com/advisories/26459

Patch

Vendor Advisory

http://securitytracker.com/id?1018573

Patch

http://www.cisco.com/warp/public/707/cisco-sa-20070815-vpnclient.shtml

Patch

http://www.securityfocus.com/bid/25332

Patch

http://www.vupen.com/english/advisories/2007/2903

http://securityreason.com/securityalert/3023

http://www.securityfocus.com/archive/1/476812/100/0/threaded

https://exchange.xforce.ibmcloud.com/vulnerabilities/36032

https://nvd.nist.gov/vuln/detail/CVE-2007-4415

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-4415

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-4415

EUVD