PT-2012-4456 · Cisco · Cisco Vpn Client

Publicado 2012-09-16 · Atualizado 2012-09-17 · CVE-2012-3052

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco VPN Client version 5.0

Description The issue allows local users to gain privileges through a Trojan horse DLL in the current working directory.

Recommendations For Cisco VPN Client version 5.0, consider restricting the search path to prevent loading of unauthorized DLLs until a fix is available.

Correção

Identificadores relacionados

CVE-2012-3052

Produtos afetados

Cisco Vpn Client

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2012-3052 · Nota de Segurança
• http://cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect31/release/notes/anyconnect31rn.html · Nota