PT-2007-5595 · Microsoft+1 · Dial-Up Networking+1

Published 2007-08-18 · Updated 2017-07-29 · CVE-2007-4414

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco VPN Client version prior to 4.8.02.0010

Description The issue allows local users to gain privileges by enabling the "Start Before Logon" (SBL) and Microsoft Dial-Up Networking options, and then interacting with the dial-up networking dialog box.

Recommendations For versions prior to 4.8.02.0010, update to version 4.8.02.0010 or later to resolve the issue. As a temporary workaround, consider disabling the "Start Before Logon" (SBL) option to minimize the risk of exploitation. Restrict access to the dial-up networking dialog box to prevent unauthorized interaction.

Fix

Related Identifiers

CVE-2007-4414

Affected Products

Cisco Vpn Client

Dial-Up Networking

References · 7

• http://securityfocus.com/bid/25332 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2007-4414 · Security Note
• http://secunia.com/advisories/26459 · Vendor Advisory
• http://cisco.com/warp/public/707/cisco-sa-20070815-vpnclient.shtml · Vendor Advisory
• http://securitytracker.com/id?1018573 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36029 · Note
• http://vupen.com/english/advisories/2007/2903 · Note