CVE-2007-4414: Medium severity Cisco VPN Client vulnerability
Published Aug 18, 2007
·Updated
Cisco VPN Client on Windows before 4.8.02.0010 allows local users to gain privileges by enabling the "Start Before Logon" (SBL) and Microsoft Dial-Up Networking options, and then interacting with the dial-up networking dialog box.
Affected Software
1 affected component
Cisco VPN Client<=4.8.1
Remediation
Patch Available
Event History
Aug 18, 2007
CVE Published
09:17 PM
Aug 19, 2007
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-4414?
CVE-2007-4414 is considered a high-severity vulnerability due to the potential for local privilege escalation.
2
How do I fix CVE-2007-4414?
To fix CVE-2007-4414, upgrade to Cisco VPN Client version 4.8.02.0010 or later.
3
Who is affected by CVE-2007-4414?
CVE-2007-4414 affects Windows users of Cisco VPN Client versions prior to 4.8.02.0010.
4
What operations allow exploitation of CVE-2007-4414?
Enabling the 'Start Before Logon' and Microsoft Dial-Up Networking options can allow exploitation of CVE-2007-4414.
5
What kind of access can be gained through CVE-2007-4414?
CVE-2007-4414 allows local users to gain elevated privileges on the affected system.