PT-2012-4456 · Cisco · Cisco Vpn Client

Published 2012-09-16 · Updated 2012-09-17 · CVE-2012-3052

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco VPN Client version 5.0

Description The issue allows local users to gain privileges through a Trojan horse DLL in the current working directory.

Recommendations For Cisco VPN Client version 5.0, consider restricting the search path to prevent loading of unauthorized DLLs until a fix is available.

Fix

Related Identifiers

CVE-2012-3052

Affected Products

Cisco Vpn Client

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2012-3052 · Security Note
• http://cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect31/release/notes/anyconnect31rn.html · Note