{"api_version":"1","generated_at":"2026-07-23T10:25:51+00:00","cve":"CVE-2007-4415","urls":{"html":"https://cve.report/CVE-2007-4415","api":"https://cve.report/api/cve/CVE-2007-4415.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2007-4415","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-4415"},"summary":{"title":"CVE-2007-4415","description":"Cisco VPN Client on Windows before 5.0.01.0600, and the 5.0.01.0600 InstallShield (IS) release, uses weak permissions for cvpnd.exe (Modify granted to Interactive Users), which allows local users to gain privileges via a modified cvpnd.exe.","state":"PUBLISHED","assigner":"mitre","published_at":"2007-08-18 21:17:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.8","severity":"","vector":"AV:L/AC:L/Au:S/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:C/I:C/A:C","baseScore":6.8,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20070815-vpnclient.shtml","name":"http://www.cisco.com/warp/public/707/cisco-sa-20070815-vpnclient.shtml","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"CCO Redirect","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2007/2903","name":"http://www.vupen.com/english/advisories/2007/2903","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/25332","name":"http://www.securityfocus.com/bid/25332","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"Cisco VPN Client for Windows Multiple Local Privilege Escalation Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://securityreason.com/securityalert/3023","name":"http://securityreason.com/securityalert/3023","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Local privilege escalation vulnerability in Cisco VPN client - CXSecurity.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36032","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36032","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/26459","name":"http://secunia.com/advisories/26459","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Cisco VPN Client Privilege Escalation Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/476812/100/0/threaded","name":"http://www.securityfocus.com/archive/1/476812/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securitytracker.com/id?1018573","name":"http://securitytracker.com/id?1018573","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"Cisco VPN Client Dialup Networking and cvpnd.exe Bugs Let Local Users Gain Elevated Privileges - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-4415","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-4415","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2007","cve_id":"4415","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"vpn_client","cpe6":"5.0.01.0600","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"4415","vulnerable":"1","versionEndIncluding":"5.0.01","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"vpn_client","cpe6":"*","cpe7":"*","cpe8":"windows","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T14:53:55.855Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"20070816 Local privilege escalation vulnerability in Cisco VPN client","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/476812/100/0/threaded"},{"name":"20070815 Local Privilege Escalation Vulnerabilities in Cisco VPN Client","tags":["vendor-advisory","x_refsource_CISCO","x_transferred"],"url":"http://www.cisco.com/warp/public/707/cisco-sa-20070815-vpnclient.shtml"},{"name":"ADV-2007-2903","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2007/2903"},{"name":"3023","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"],"url":"http://securityreason.com/securityalert/3023"},{"name":"26459","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/26459"},{"name":"25332","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/25332"},{"name":"1018573","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1018573"},{"name":"cisco-vpn-cvpnd-privilege-escalation(36032)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36032"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2007-08-15T00:00:00.000Z","descriptions":[{"lang":"en","value":"Cisco VPN Client on Windows before 5.0.01.0600, and the 5.0.01.0600 InstallShield (IS) release, uses weak permissions for cvpnd.exe (Modify granted to Interactive Users), which allows local users to gain privileges via a modified cvpnd.exe."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-15T20:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"20070816 Local privilege escalation vulnerability in Cisco VPN client","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/476812/100/0/threaded"},{"name":"20070815 Local Privilege Escalation Vulnerabilities in Cisco VPN Client","tags":["vendor-advisory","x_refsource_CISCO"],"url":"http://www.cisco.com/warp/public/707/cisco-sa-20070815-vpnclient.shtml"},{"name":"ADV-2007-2903","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2007/2903"},{"name":"3023","tags":["third-party-advisory","x_refsource_SREASON"],"url":"http://securityreason.com/securityalert/3023"},{"name":"26459","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/26459"},{"name":"25332","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/25332"},{"name":"1018573","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1018573"},{"name":"cisco-vpn-cvpnd-privilege-escalation(36032)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36032"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2007-4415","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cisco VPN Client on Windows before 5.0.01.0600, and the 5.0.01.0600 InstallShield (IS) release, uses weak permissions for cvpnd.exe (Modify granted to Interactive Users), which allows local users to gain privileges via a modified cvpnd.exe."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"20070816 Local privilege escalation vulnerability in Cisco VPN client","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/476812/100/0/threaded"},{"name":"20070815 Local Privilege Escalation Vulnerabilities in Cisco VPN Client","refsource":"CISCO","url":"http://www.cisco.com/warp/public/707/cisco-sa-20070815-vpnclient.shtml"},{"name":"ADV-2007-2903","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2007/2903"},{"name":"3023","refsource":"SREASON","url":"http://securityreason.com/securityalert/3023"},{"name":"26459","refsource":"SECUNIA","url":"http://secunia.com/advisories/26459"},{"name":"25332","refsource":"BID","url":"http://www.securityfocus.com/bid/25332"},{"name":"1018573","refsource":"SECTRACK","url":"http://securitytracker.com/id?1018573"},{"name":"cisco-vpn-cvpnd-privilege-escalation(36032)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36032"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2007-4415","datePublished":"2007-08-18T21:00:00.000Z","dateReserved":"2007-08-18T00:00:00.000Z","dateUpdated":"2024-08-07T14:53:55.855Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2007-08-18 21:17:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:C/I:C/A:C","baseScore":6.8,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.1,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:*:*:windows:*:*:*:*:*","versionEndIncluding":"5.0.01","matchCriteriaId":"17848271-64A7-4807-B1FB-01A66E91E8CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:5.0.01.0600:*:*:*:*:*:*:*","matchCriteriaId":"58FB3744-3107-410F-8E03-228060A95018"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2007","CveId":"4415","Ordinal":"1","Title":"CVE-2007-4415","CVE":"CVE-2007-4415","Year":"2007"},"notes":[{"CveYear":"2007","CveId":"4415","Ordinal":"1","NoteData":"Cisco VPN Client on Windows before 5.0.01.0600, and the 5.0.01.0600 InstallShield (IS) release, uses weak permissions for cvpnd.exe (Modify granted to Interactive Users), which allows local users to gain privileges via a modified cvpnd.exe.","Type":"Description","Title":"CVE-2007-4415"},{"CveYear":"2007","CveId":"4415","Ordinal":"2","NoteData":"2007-08-18","Type":"Other","Title":"Published"},{"CveYear":"2007","CveId":"4415","Ordinal":"3","NoteData":"2018-10-15","Type":"Other","Title":"Modified"}]}}}