Description
Cisco VPN Client 5.x through 5.0.07.0440 uses weak permissions for vpnclient.ini, which allows local users to gain privileges by entering an arbitrary program name in the Command field of the ApplicationLauncher section.
References (2)
Core 2
Core References
Exploit x_refsource_misc
https://www.nettitude.co.uk/vulnerability-discovered-in-unsupported-cisco-systems-vpn-client/
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1033750
Scores
EPSS
0.0054
EPSS Percentile
41.9%
Details
CWE
CWE-264
Status
published
Products (20)
cisco/vpn_client
5.0
cisco/vpn_client
5.0.01
cisco/vpn_client
5.0.01.0600
cisco/vpn_client
5.0.2
cisco/vpn_client
5.0.02.0090
cisco/vpn_client
5.0.2.0090
cisco/vpn_client
5.0.03.0530
cisco/vpn_client
5.0.03.0560
cisco/vpn_client
5.0.04.0300
cisco/vpn_client
5.0.5
... and 10 more
Published
Oct 06, 2015
Tracked Since
Feb 18, 2026