Buffer overflows in the Cisco VPN 5000 Client before 5.2.7 for Linux, and VPN 5000 Client before 5.2.8 for Solaris, allow local users to gain root privileges via (1) close_tunnel and (2) open_tunnel.
| Software | From | Fixed in |
|---|---|---|
| cisco / vpn_5000_client | 5.2.6 | 5.2.6.x |
| cisco / vpn_5000_client | 5.2.7 | 5.2.7.x |