CVE-2008-0324
published 2008-01-17CVE-2008-0324: Cisco Systems VPN Client IPSec Driver (CVPNDRVA.sys) 5.0.02.0090 allows local users to cause a denial of service (crash) by calling the 0x80002038 IOCTL with a…
PriorityP416medium4.9CVSS 2.0
AVLACLAuNCNINAC
EXPLOIT
EPSS
1.17%
63.6th percentile
Cisco Systems VPN Client IPSec Driver (CVPNDRVA.sys) 5.0.02.0090 allows local users to cause a denial of service (crash) by calling the 0x80002038 IOCTL with a small size value, which triggers memory corruption.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | vpn_client | — | — |
CVSS provenance
nvdv2.04.9MEDIUMAV:L/AC:L/Au:N/C:N/I:N/A:C
vendor_cisco4.9MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco VPN Client IPSec Driver Kernel Memory Corruption Vulnerability
vendor_cisco·2008-01-15·CVSS 4.9
CVE-2008-0324 [MEDIUM] CWE-399 Cisco VPN Client IPSec Driver Kernel Memory Corruption Vulnerability
Cisco VPN Client IPSec Driver Kernel Memory Corruption Vulnerability
Cisco VPN Client for Windows version 5.0.02.0090 contains a vulnerability that could allow a local attacker to cause the affected system to fail and restart, resulting in a denial of service (DoS) condition.
This vulnerability exists due to invalid memory operations. An attacker could exploit this vulnerability by running a program designed to make malicious requests to the affected application. As a result of processing these requests, the application could corrupt system memory,causing the system to fail and restart, thus denying service to legitimate users.
Proof-of-concept code exists that demonstrates a DoS condition.
Cisco has not confirmed this vulnerability and updates are not available.
An attacker must log on
GHSA
GHSA-x327-3g78-w8g3: Cisco Systems VPN Client IPSec Driver (CVPNDRVA
ghsa_unreviewed·2022-05-01
CVE-2008-0324 [MEDIUM] GHSA-x327-3g78-w8g3: Cisco Systems VPN Client IPSec Driver (CVPNDRVA
Cisco Systems VPN Client IPSec Driver (CVPNDRVA.sys) 5.0.02.0090 allows local users to cause a denial of service (crash) by calling the 0x80002038 IOCTL with a small size value, which triggers memory corruption.
No detection rules found.
No writeups or analysis indexed.
http://secunia.com/advisories/28472http://www.securityfocus.com/bid/27289http://www.securitytracker.com/id?1019240http://www.vupen.com/english/advisories/2008/0170https://exchange.xforce.ibmcloud.com/vulnerabilities/39694https://www.exploit-db.com/exploits/4911http://secunia.com/advisories/28472http://www.securityfocus.com/bid/27289http://www.securitytracker.com/id?1019240http://www.vupen.com/english/advisories/2008/0170https://exchange.xforce.ibmcloud.com/vulnerabilities/39694https://www.exploit-db.com/exploits/4911
2008-01-17
Published