CVE-2017-9606 | BDVDB-2026-86643 Detail

Description#

Infotecs ViPNet Client and Coordinator before 4.3.2-42442 allow local users to gain privileges by placing a Trojan horse ViPNet update file in the update folder. The attack succeeds because of incorrect folder permissions in conjunction with a lack of integrity and authenticity checks.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12017-06-15Record published in the CVE List.
2. Version 22024-08-05Most recent update recorded in the CVE List.