ID de Prueba:	1.3.6.1.4.1.25623.1.0.25550
Categoría:	Windows
Título:	Cisco VPN Client Privilege Escalation Vulnerability
Resumen:	The installed Cisco VPN Client version is prone to a privilege; escalation attack.
Descripción:	Summary: The installed Cisco VPN Client version is prone to a privilege escalation attack. Vulnerability Insight: By using the 'Start before logon' feature in the VPN client dialer, a local attacker may gain privileges and execute arbitrary commands with SYSTEM privileges. Solution: Upgrade to version 4.8.01.0300 or a later. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2006-2679 BugTraq ID: 18094 http://www.securityfocus.com/bid/18094 Cisco Security Advisory: 20060524 Windows VPN Client Local Privilege Escalation Vulnerability http://www.cisco.com/en/US/products/products_security_advisory09186a008069a323.shtml http://www.osvdb.org/25888 http://securitytracker.com/id?1016156 http://secunia.com/advisories/20261 http://www.vupen.com/english/advisories/2006/1964 XForce ISS Database: cisco-winvpn-privilege-escalation(26632) https://exchange.xforce.ibmcloud.com/vulnerabilities/26632
Copyright	Copyright (C) 2008 Ferdy Riphagen

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.