| Package | Affected versions | Patched versions |
|---|---|---|
| vpn client | = 0490= 2.0= 3.0= 3.0.5= 3.1= 3.5.1= 3.5.1c= 3.5.2= 3.6.5= 4.7.00.0000= 4.8.00.0000= 4.8.00.0440= 4.8.01= 4.8.02.0010= 4.8.1= 4.9= 5.0.00.340= 5.0.01= 5.0.01.0600= 5.0.02.0090= 5.0.2.0090 |
The StartServiceCtrlDispatcher function in the cvpnd service (cvpnd.exe) in Cisco VPN client for Windows before 5.0.06.0100 does not properly handle an ERROR_FAILED_SERVICE_CONTROLLER_CONNECT error, which allows local users to cause a denial of service (service crash and VPN connection loss) via a manual start of cvpnd.exe while the cvpnd service is running.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free