CVE-2009-4118
First published: Tue Dec 01 2009(Updated: )
The StartServiceCtrlDispatcher function in the cvpnd service (cvpnd.exe) in Cisco VPN client for Windows before 5.0.06.0100 does not properly handle an ERROR_FAILED_SERVICE_CONTROLLER_CONNECT error, which allows local users to cause a denial of service (service crash and VPN connection loss) via a manual start of cvpnd.exe while the cvpnd service is running.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco VPN Client | =5.0.02.0090-base | |
| Cisco VPN Client | =4.8.02.0010-base | |
| Cisco VPN Client | =3.5.1c | |
| Cisco VPN Client | =4.7.00.0000 | |
| Cisco VPN Client | =3.1 | |
| Cisco VPN Client | =5.0.01.0600-base | |
| Cisco VPN Client | =5.0.01 | |
| Cisco VPN Client | =3.0 | |
| Cisco VPN Client | =4.8.1 | |
| Cisco VPN Client | =4.9-base | |
| Cisco VPN Client | =3.5.1 | |
| Cisco VPN Client | =0490-base | |
| Cisco VPN Client | =4.8.00.0440 | |
| Cisco VPN Client | =3.5.2 | |
| Cisco VPN Client | =2.0 | |
| Cisco VPN Client | =3.0.5 | |
| Cisco VPN Client | =4.8.01-base | |
| Cisco VPN Client | =4.8.00.0000 | |
| Cisco VPN Client | =5.0.00.340-base | |
| Cisco VPN Client | =3.6.5-base | |
| Cisco VPN Client | =5.0.2.0090 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-historical
- collector/nvd-index
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/description
- agent/type
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/cisco
- canonical/cisco vpn client
- version/cisco vpn client/5.0.02.0090-base
- version/cisco vpn client/4.8.02.0010-base
- version/cisco vpn client/3.5.1c
- version/cisco vpn client/4.7.00.0000
- version/cisco vpn client/3.1
- version/cisco vpn client/5.0.01.0600-base
- version/cisco vpn client/5.0.01
- version/cisco vpn client/3.0
- version/cisco vpn client/4.8.1
- version/cisco vpn client/4.9-base
- version/cisco vpn client/3.5.1
- version/cisco vpn client/0490-base
- version/cisco vpn client/4.8.00.0440
- version/cisco vpn client/3.5.2
- version/cisco vpn client/2.0
- version/cisco vpn client/3.0.5
- version/cisco vpn client/4.8.01-base
- version/cisco vpn client/4.8.00.0000
- version/cisco vpn client/5.0.00.340-base
- version/cisco vpn client/3.6.5-base
- version/cisco vpn client/5.0.2.0090