medium4.9Public exploit code
CVE-2008-0324
Cisco Systems VPN Client IPSec Driver (CVPNDRVA.sys) 5.0.02.0090 allows local users to cause a denial of service (crash) by calling the 0x80002038 IOCTL with a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Cisco VPN Client - IPSec Driver Local kernel system pool Corruption (PoC)2008-01-15 · dos · windows · Verified
Impact
Cisco Systems VPN Client IPSec Driver (CVPNDRVA.sys) 5.0.02.0090 allows local users to cause a denial of service (crash) by calling the 0x80002038 IOCTL with a small size value, which triggers memory corruption.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Vpn Client | Version 5.0.2.0090 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/28472
- http://www.securityfocus.com/bid/27289
- http://www.securitytracker.com/id?1019240
- http://www.vupen.com/english/advisories/2008/0170
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39694
- https://www.exploit-db.com/exploits/4911
- http://secunia.com/advisories/28472
- http://www.securityfocus.com/bid/27289
- http://www.securitytracker.com/id?1019240
- http://www.vupen.com/english/advisories/2008/0170
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39694
- https://www.exploit-db.com/exploits/4911