CVE-2007-4415

No fix known EPSS <1%

Cisco VPN Client on Windows before 5.0.01.0600, and the 5.0.01.0600 InstallShield (IS) release, uses weak permissions for cvpnd.exe (Modify granted to Interactive Users), which allows local users to gain privileges via a modified cvpnd.exe.

Published 2007-08-18 · CVE record · OSV

Products: cisco vpn_client