CVE-2012-3052 - OpenCVE

Untrusted search path vulnerability in Cisco VPN Client 5.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka Bug ID CSCua28747.

No CVSS v3.1

No CVSS v3.0

Access Vector Local

Access Complexity Medium

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

AV:L/AC:M/Au:N/C:C/I:C/A:C

Vendors & Products
CPE Configurations

Vendors	Products
Cisco	Vpn Client

Configuration 1 [-]

OR	cpe:2.3:a:cisco:vpn_client:5.0:::::::*
	cpe:2.3:a:cisco:vpn_client:5.0.01:::::::*
	cpe:2.3:a:cisco:vpn_client:5.0.01.0600:::::::*
	cpe:2.3:a:cisco:vpn_client:5.0.2:::::::*
	cpe:2.3:a:cisco:vpn_client:5.0.02.0090:::::::*
	cpe:2.3:a:cisco:vpn_client:5.0.2.0090:::::::*
	cpe:2.3:a:cisco:vpn_client:5.0.03.0530:::::::*
	cpe:2.3:a:cisco:vpn_client:5.0.03.0560:::::::*
	cpe:2.3:a:cisco:vpn_client:5.0.04.0300:::::::*
	cpe:2.3:a:cisco:vpn_client:5.0.5:::::::*
	cpe:2.3:a:cisco:vpn_client:5.0.05.0290:::::::*
	cpe:2.3:a:cisco:vpn_client:5.0.6:::::::*
	cpe:2.3:a:cisco:vpn_client:5.0.06.0160:::::::*
	cpe:2.3:a:cisco:vpn_client:5.0.7:::::::*
	cpe:2.3:a:cisco:vpn_client:5.0.07.0290:::::::*
	cpe:2.3:a:cisco:vpn_client:5.0.07.0410:::::::*
	cpe:2.3:a:cisco:vpn_client:5.0.07.0440:::::::*

References

Link	Resource
http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect31/release/notes/anyconnect31rn.html

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: cisco

Published: 2022-10-03T16:15:23

Updated: 2022-10-03T16:15:23

Reserved: 2022-10-03T00:00:00

Link: CVE-2012-3052

JSON object: View

NVD Information

Status : Analyzed

Published: 2012-09-16T10:34:50.457

Modified: 2012-09-17T04:00:00.000

Link: CVE-2012-3052

JSON object: View

Redhat Information

No data.

CWE

NVD-CWE-Other

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cisco:vpn_client:5.0:*:*:*:*:*:*:*", "matchCriteriaId": "E4F8D296-8C41-4ACF-97A1-B046CE18C623", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:vpn_client:5.0.01:*:*:*:*:*:*:*", "matchCriteriaId": "A241A0DC-E0C0-40FF-825F-3BFD04EF05C4", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:vpn_client:5.0.01.0600:*:*:*:*:*:*:*", "matchCriteriaId": "58FB3744-3107-410F-8E03-228060A95018", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:vpn_client:5.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "51BB77A8-9610-4622-855E-F41D4DE8BF98", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:vpn_client:5.0.02.0090:*:*:*:*:*:*:*", "matchCriteriaId": "7093F844-3939-481C-9D76-DC9812309474", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:vpn_client:5.0.2.0090:*:*:*:*:*:*:*", "matchCriteriaId": "AB3D6BB1-BDCB-46A1-A213-17CB1F46683F", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:vpn_client:5.0.03.0530:*:*:*:*:*:*:*", "matchCriteriaId": "F1845EE7-185C-4537-B968-10F1E20082B8", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:vpn_client:5.0.03.0560:*:*:*:*:*:*:*", "matchCriteriaId": "A0D44782-3DD1-45DA-9457-8B6D07E12B5B", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:vpn_client:5.0.04.0300:*:*:*:*:*:*:*", "matchCriteriaId": "D9FED413-4C1E-45C2-B2CC-5C70079B00F8", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:vpn_client:5.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "FDA1A681-3063-4894-BA84-846CFCE35D54", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:vpn_client:5.0.05.0290:*:*:*:*:*:*:*", "matchCriteriaId": "BBC5508A-92AC-437A-A55E-2A864A757BFC", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:vpn_client:5.0.6:*:*:*:*:*:*:*", "matchCriteriaId": "7072DB27-CFE9-4D5D-A912-608A719E72CF", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:vpn_client:5.0.06.0160:*:*:*:*:*:*:*", "matchCriteriaId": "54DE7A64-BF7C-4062-9315-18AD3D5F6FD3", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:vpn_client:5.0.7:*:*:*:*:*:*:*", "matchCriteriaId": "34B077DB-FBD7-4B15-B682-5A8912A07727", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:vpn_client:5.0.07.0290:*:*:*:*:*:*:*", "matchCriteriaId": "465D80AD-7622-440F-BFF5-C94C62A3E905", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:vpn_client:5.0.07.0410:*:*:*:*:*:*:*", "matchCriteriaId": "6F8659A2-717E-4D8B-8877-B0FACF39C599", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:vpn_client:5.0.07.0440:*:*:*:*:*:*:*", "matchCriteriaId": "32B0C059-A4A1-4F31-B561-F1611814004C", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Untrusted search path vulnerability in Cisco VPN Client 5.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka Bug ID CSCua28747."}, {"lang": "es", "value": "Vulnerabilidad de path de b\u00fasqueda no confiable en Cisco VPN Client v5.0 permite a usuarios locales obtener privilegios a trav\u00e9s de un fichero .dll troyanizado en el directorio de trabajo actual tambi\u00e9n conocido como Bug ID CSCua28747."}], "evaluatorComment": "Per: http://cwe.mitre.org/data/definitions/426.html\r\n\r\n'CWE-426: Untrusted Search Path'", "id": "CVE-2012-3052", "lastModified": "2012-09-17T04:00:00.000", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 6.9, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 3.4, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2012-09-16T10:34:50.457", "references": [{"source": "ykramarz@cisco.com", "url": "http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect31/release/notes/anyconnect31rn.html"}], "sourceIdentifier": "ykramarz@cisco.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}