Buffer overflows in the Cisco VPN 5000 Client before 5.2.7 for Linux, and VPN 5000 Client before 5.2.8 for Solaris, allow local users to gain root privileges via (1) close_tunnel and (2) open_tunnel.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Vpn_5000_client | Cisco | 5.2.6 (including) | 5.2.6 (including) |
| Vpn_5000_client | Cisco | 5.2.7 (including) | 5.2.7 (including) |
References
- http://www.cisco.com/warp/public/707/vpn5k-client-multiple-vuln-pub.shtml
- http://www.iss.net/security_center/static/10131.php
- http://www.securityfocus.com/bid/5734
- http://www.cisco.com/warp/public/707/vpn5k-client-multiple-vuln-pub.shtml
- http://www.iss.net/security_center/static/10131.php
- http://www.securityfocus.com/bid/5734