Cisco VPN Client for Windows 'StartServiceCtrlDispatche' Local Denial of Service Vulnerability

Bugtraq ID:	37077
Class:	Design Error
CVE:	CVE-2009-4118
Remote:	No
Local:	Yes
Published:	Nov 19 2009 12:00AM
Updated:	Apr 13 2015 09:05PM
Credit:	Alex Hernandez
Vulnerable:	Cisco VPN Client for Windows 5.0.1 Cisco VPN Client for Windows 4.8.2 .0010 Cisco VPN Client for Windows 4.8.2 Cisco VPN Client for Windows 4.8.1 Cisco VPN Client for Windows 4.8 Cisco VPN Client for Windows 4.7 .0533 Cisco VPN Client for Windows 4.7 Cisco VPN Client for Windows 4.6
Not Vulnerable:	Cisco VPN Client for Windows 5.0.6 .0100

Cisco VPN Client for Windows 'StartServiceCtrlDispatche' Local Denial of Service Vulnerability

Cisco VPN Client for Windows is prone to a local denial-of-service vulnerability.

A local attacker can exploit this issue to crash the 'cvpnd' service and terminate all active VPN sessions, resulting in denial-of-service conditions.

This issue affects versions prior to VPN Client 5.0.06.0100 for Windows.

Cisco VPN Client for Windows 'StartServiceCtrlDispatche' Local Denial of Service Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/37077.c

Cisco VPN Client for Windows 'StartServiceCtrlDispatche' Local Denial of Service Vulnerability

Solution:
Vendor updates are available. Please see the references for details.

Cisco VPN Client for Windows 'StartServiceCtrlDispatche' Local Denial of Service Vulnerability

References:

• VPN Client (Cisco Systems)
  
• Cisco VPN Client Improper StartServiceCtrlDispatcher Behavior (Cisco)