Description
Cisco VPN Client on Windows before 4.8.02.0010 allows local users to gain privileges by enabling the "Start Before Logon" (SBL) and Microsoft Dial-Up Networking options, and then interacting with the dial-up networking dialog box.
References
- 20070815 Local Privilege Escalation Vulnerabilities in Cisco VPN Client vendor-advisory
- ADV-2007-2903 vdb-entry
- 26459 third-party-advisory
- 25332 vdb-entry
- cisco-vpn-dialup-privilege-escalation(36029) vdb-entry
- 1018573 vdb-entry