PT-2007-5595 · Microsoft+1 · Dial-Up Networking+1

Publicado 2007-08-18 · Atualizado 2017-07-29 · CVE-2007-4414

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco VPN Client version prior to 4.8.02.0010

Description The issue allows local users to gain privileges by enabling the "Start Before Logon" (SBL) and Microsoft Dial-Up Networking options, and then interacting with the dial-up networking dialog box.

Recommendations For versions prior to 4.8.02.0010, update to version 4.8.02.0010 or later to resolve the issue. As a temporary workaround, consider disabling the "Start Before Logon" (SBL) option to minimize the risk of exploitation. Restrict access to the dial-up networking dialog box to prevent unauthorized interaction.

Correção

Identificadores relacionados

CVE-2007-4414

Produtos afetados

Cisco Vpn Client

Dial-Up Networking

Referências · 7

• http://securitytracker.com/id?1018573 · Nota
• http://securityfocus.com/bid/25332 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36029 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-4414 · Nota de Segurança
• http://secunia.com/advisories/26459 · Aviso do Fabricante
• http://cisco.com/warp/public/707/cisco-sa-20070815-vpnclient.shtml · Aviso do Fabricante
• http://vupen.com/english/advisories/2007/2903 · Nota