NVD

Id
9417  
Name
CVE-2011-2678  
Description
The Cisco VPN Client 5.0.7.0240 and 5.0.7.0290 on 64-bit Windows platforms uses weak permissions (NT AUTHORITYINTERACTIVE:F) for cvpnd.exe, which allows local users to gain privileges by replacing this executable file with an arbitrary program, aka Bug ID CSCtn50645. NOTE: this vulnerability exists because of a CVE-2007-4415 regression.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.1  
CVSS Vector
(AV:L/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-07-07  
Modified Date
2011-09-21  
Seq
2011-2678  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
53705 9417 CVE-2011-2678 http://isc.sans.edu/diary.html?storyid=11125  View
53706 9417 CVE-2011-2678 8297  View
53707 9417 CVE-2011-2678 20070815 Local Privilege Escalation Vulnerabilities in Cisco VPN Client  View
53708 9417 CVE-2011-2678 20110628 NGS00051 Technical Advisory: Cisco VPN Client Privilege Escalation  View
53709 9417 CVE-2011-2678 cisco-vpn-cvpnd-priv-esc(68485)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
32907 JVNDB-2011-003147 Cisco VPN Client における権限を取得される脆弱性 64-bit Windows プラットフォーム上の Cisco VPN Client は、cvpnd.exe に対して脆弱なパーミッション (NT AUTHORITYINTERACTIVE:F) を使用しているため、権限を取得される脆弱性が存在します。 CVE-2011-2678 50585 CVE-2011-2678 9417 6.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003147.html 2011-07-07 2011-12-01 View