CVE-2006-2679

Description

Unspecified vulnerability in the VPN Client for Windows Graphical User Interface (GUI) (aka the VPN client dialer) in Cisco VPN Client for Windows 4.8.00.* and earlier, except for 4.7.00.0533, allows local authenticated, interactive users to gain privileges, possibly due to privileges of dialog boxes, aka bug ID CSCsd79265.

Affected products

• Cisco / vpn_client2.0 – 2.0
• Cisco / vpn_client3.0 – 3.0
• Cisco / vpn_client3.0.5 – 3.0.5
• Cisco / vpn_client3.1 – 3.1
• Cisco / vpn_client3.5.1 – 3.5.1
• Cisco / vpn_client3.5.1c – 3.5.1c
• Cisco / vpn_client3.5.2 – 3.5.2
• Cisco / vpn_client4.7.00.0000 – 4.7.00.0000
• Cisco / vpn_client4.8.00.0000 – 4.8.00.0000

References

• MISChttp://securitytracker.com/id?1016156
• VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2006/1964
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/26632
• MISChttp://www.osvdb.org/25888
• VENDOR_ADVISORYhttp://www.cisco.com/en/US/products/products_security_advisory09186a008069a323.shtml
• VENDOR_ADVISORYhttp://secunia.com/advisories/20261
• MISChttp://www.securityfocus.com/bid/18094