CVE-2009-4118

Name: CVE-2009-4118
Creator: NVD / NIST
Published: 2009-12-01T00:30:00.233+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 2.50%

Last modified Jun 16, 2026

CVE-2009-4118 is a vulnerability of currently unknown severity. The StartServiceCtrlDispatcher function in the cvpnd service (cvpnd.exe) in Cisco VPN client for Windows before 5.0.06.0100 does not properly handle an ERROR_FAILED_SERVICE_CONTROLLER_CONNECT error, which allows local users to cause a denial of service (service crash and VPN connection loss) via a manual start of cvpnd.exe while the cvpnd service is running.. EPSS estimates a 2.50% chance of exploitation in the next 30 days.

Description

The StartServiceCtrlDispatcher function in the cvpnd service (cvpnd.exe) in Cisco VPN client for Windows before 5.0.06.0100 does not properly handle an ERROR_FAILED_SERVICE_CONTROLLER_CONNECT error, which allows local users to cause a denial of service (service crash and VPN connection loss) via a manual start of cvpnd.exe while the cvpnd service is running.

Metrics

EPSS Probability

2.50%

82.7th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Vendor	Product	Versions	Update
Cisco	Vpn Client	2.0	—
Cisco	Vpn Client	3.0	—
Cisco	Vpn Client	3.0.5	—
Cisco	Vpn Client	3.1	—
Cisco	Vpn Client	3.5.1	—
Cisco	Vpn Client	3.5.1c	—
Cisco	Vpn Client	3.5.2	—
Cisco	Vpn Client	3.6.5	Base
Cisco	Vpn Client	4.7.00.0000	—
Cisco	Vpn Client	4.8.00.0000	—
Cisco	Vpn Client	4.8.00.0440	—
Cisco	Vpn Client	4.8.1	—
Cisco	Vpn Client	4.8.01	Base
Cisco	Vpn Client	4.8.02.0010	Base
Cisco	Vpn Client	4.9	Base
Cisco	Vpn Client	5.0.00.340	Base
Cisco	Vpn Client	5.0.01	—
Cisco	Vpn Client	5.0.01.0600	Base
Cisco	Vpn Client	5.0.2.0090	—
Cisco	Vpn Client	5.0.02.0090	Base
Cisco	Vpn Client	0490	Base

References

http://packetstormsecurity.org/0911-exploits/sybsec-adv17.txtExploit
http://secunia.com/advisories/37419Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=19445Vendor Advisory
http://www.securityfocus.com/bid/37077Exploit
http://www.vupen.com/english/advisories/2009/3296Vendor Advisory
http://packetstormsecurity.org/0911-exploits/sybsec-adv17.txtExploit
http://secunia.com/advisories/37419Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=19445Vendor Advisory
http://www.securityfocus.com/bid/37077Exploit
http://www.vupen.com/english/advisories/2009/3296Vendor Advisory

Timeline

Published: Dec 1, 2009
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2009-4118?

How severe is CVE-2009-4118?

Severity scoring for CVE-2009-4118 is pending analysis. The EPSS model estimates a 2.50% probability of exploitation in the next 30 days.

How do I fix CVE-2009-4118?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2009-4118?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST