GCVE - cpe:2.3:a:cisco:vpn_client:3.5.1c:*:windows:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:cisco:vpn_client:3.5.1c:*:windows:*:*:*:*:*

part: a version: 3.5.1c update: *

Vendor	Cisco (`e1b3baff-aaf9-56a6-a68a-41e28ce616a5`)
Product	Vpn Client (`178e7c2c-cd02-56e5-a6b0-b19cab28f99a`)
Edition	windows
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-4118`	vulnerable	2026-06-08 04:51:47.087707	Details available The StartServiceCtrlDispatcher function in the cvpnd service (cvpnd.exe) in Cisco VPN client for Windows before 5.0.06.0100 does not properly handle an ERROR_FAILED_SERVICE_CONTROLLER_CONNECT error, which allows local users to cause a denial of service (service crash and VPN connection loss) via a manual start of cvpnd.exe while the cvpnd service is running. Published: 2009-12-01T00:00:00.000Z Updated: 2024-09-16T16:13:26.291Z Open on db.gcve.eu Reference links http://secunia.com/advisories/37419 http://packetstormsecurity.org/0911-exploits/sybsec-adv17.txt http://www.vupen.com/english/advisories/2009/3296 http://tools.cisco.com/security/center/viewAlert.x?alertId=19445 http://www.securityfocus.com/bid/37077	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2679`	vulnerable	2026-06-08 04:49:07.321131	Details available Unspecified vulnerability in the VPN Client for Windows Graphical User Interface (GUI) (aka the VPN client dialer) in Cisco VPN Client for Windows 4.8.00.* and earlier, except for 4.7.00.0533, allows local authenticated, interactive users to gain privileges, possibly due to privileges of dialog boxes, aka bug ID CSCsd79265. Published: 2006-05-31T10:00:00.000Z Updated: 2024-08-07T17:58:51.928Z Open on db.gcve.eu Reference links http://securitytracker.com/id?1016156 http://www.vupen.com/english/advisories/2006/1964 https://exchange.xforce.ibmcloud.com/vulnerabilities/26632 http://www.osvdb.org/25888 http://www.cisco.com/en/US/products/products_security_advisory09186a008069a323.shtml	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-1108`	vulnerable	2026-06-08 04:46:22.946215	Details available Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.6(Rel), when configured with all tunnel mode, can be forced into acknowledging a TCP packet from outside the tunnel. Published: 2004-09-01T04:00:00.000Z Updated: 2024-08-08T03:12:17.045Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/10047 http://www.securityfocus.com/bid/5651 http://www.cisco.com/warp/public/707/vpnclient-multiple2-vuln-pub.shtml	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-1107`	vulnerable	2026-06-08 04:46:22.945593	Details available Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.5.2B, does not generate sufficiently random numbers, which may make it vulnerable to certain attacks such as spoofing. Published: 2004-09-01T04:00:00.000Z Updated: 2024-08-08T03:12:17.029Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/10046 http://www.securityfocus.com/bid/5653 http://www.cisco.com/warp/public/707/vpnclient-multiple2-vuln-pub.shtml	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Vpn Client

Notes

PURL mappings

Vulnerability references

Contribute