A vulnerability has been reported in Cisco VPN Client, which can be exploited by malicious, local users to gain escalated privileges on a vulnerable system.
The vulnerability is caused due to an unspecified error in the GUI (also known as the “VPN client dialer”) and can be exploited to execute arbitrary commands with SYSTEM privileges.
The vulnerability has been reported in versions 2.x, 3.x, 4.0.x, 4.6.x, 4.7.x (except version 4.7.00.0533), and 4.8.00.x for Windows.
[tags]Cisco VPN, Privilege, Cisco, Vulnerability[/tags]