Exploitation Summary
EIP tracks 2 public exploits for CVE-2009-4118. PoCs published by Alex Hernandez, alt3kx.
AI-analyzed exploit summary This PoC exploits an integer overflow vulnerability in Cisco VPN Client versions 4.8.02.0010 and 5.0.x by passing a malformed buffer as a command-line argument to cvpnd.exe, causing a denial-of-service (DoS). The code checks for active Cisco VPN ports (TCP/UDP 62514) and attempts to crash the service.
Description
The StartServiceCtrlDispatcher function in the cvpnd service (cvpnd.exe) in Cisco VPN client for Windows before 5.0.06.0100 does not properly handle an ERROR_FAILED_SERVICE_CONTROLLER_CONNECT error, which allows local users to cause a denial of service (service crash and VPN connection loss) via a manual start of cvpnd.exe while the cvpnd service is running.
Exploits (2)
This PoC exploits an integer overflow vulnerability in Cisco VPN Client versions 4.8.02.0010 and 5.0.x by passing a malformed buffer as a command-line argument to cvpnd.exe, causing a denial-of-service (DoS). The code checks for active Cisco VPN ports (TCP/UDP 62514) and attempts to crash the service.
This repository provides a technical overview of CVE-2009-4118, an integer overflow vulnerability in the Cisco VPN Client leading to a Denial of Service (DoS). It references Exploit-DB and Cisco's official advisory but does not include functional exploit code.