CVEvulnerability

CVE-2012-3052

6.9 MEDIUM Published 2012-09-16 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-09-16
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C

Description

Untrusted search path vulnerability in Cisco VPN Client 5.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka Bug ID CSCua28747.

Affected configurations

• cisco vpn client 5.0 • cisco vpn client 5.0.01 • cisco vpn client 5.0.01.0600 • cisco vpn client 5.0.2 • cisco vpn client 5.0.02.0090 • cisco vpn client 5.0.2.0090 • cisco vpn client 5.0.03.0530 • cisco vpn client 5.0.03.0560 • cisco vpn client 5.0.04.0300 • cisco vpn client 5.0.5 • cisco vpn client 5.0.05.0290 • cisco vpn client 5.0.6 • cisco vpn client 5.0.06.0160 • cisco vpn client 5.0.7 • cisco vpn client 5.0.07.0290 • cisco vpn client 5.0.07.0410 • cisco vpn client 5.0.07.0440

References