PT-2003-1228 · Cisco+2 · Cisco Vpn 5000 Client+2

Published 2003-03-18 · Updated 2008-09-05 · CVE-2002-1492

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco VPN 5000 Client versions prior to 5.2.7 for Linux Cisco VPN 5000 Client versions prior to 5.2.8 for Solaris

Description The issue allows local users to gain root privileges. This is achieved through buffer overflows in specific functions, including close tunnel and open tunnel.

Recommendations For Cisco VPN 5000 Client versions prior to 5.2.7 for Linux, update to version 5.2.7 or later. For Cisco VPN 5000 Client versions prior to 5.2.8 for Solaris, update to version 5.2.8 or later.

Exploit

Fix

Related Identifiers

CVE-2002-1492

Affected Products

Cisco Vpn 5000 Client

Linux

Solaris

References · 6

• 🔥 https://exploit-db.com/exploits/21805 · Exploit
• 🔥 http://securityfocus.com/bid/5734 · Exploit
• 🔥 https://exploit-db.com/exploits/21806 · Exploit
• http://cisco.com/warp/public/707/vpn5k-client-multiple-vuln-pub.shtml · Vendor Advisory
• http://iss.net/security_center/static/10131.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-1492 · Security Note