CVE:CVE-2009-4118
CNNVD:CNNVD-200912-003
Cisco VPN Client是美国思科（Cisco）公司的一套跨平台的VPN客户端软件。
Windows平台上的Cisco VPN客户端使用cvpnd.exe二进制程序作为服务进程，而cvpnd服务没有正确地实现StartServiceCtrlDispatcher功能。ERROR_FAILED_SERVICE_CONTROLLER_CONNECT 错误，本地用户可以通过从命令行调用cvpnd.exe服务触发整数溢出，导致中断所有活动的VPN会话。引发拒绝服务漏洞。
solution:Upgrade cisco vpn_client to a higher version than 2.0,3.0,3.0.5,3.1,3.5.1,3.5.1c,3.5.2,3.6.5:base,4.7.00.0000,4.8.00.0000,4.8.00.0440,4.8.1,4.8.01:base,4.8.02.0010:base,4.9:base,5.0.00.340:base,5.0.01,5.0.01.0600:base,5.0.2.0090,5.0.02.0090:base,0490:base,and avoid the version 2.0,3.0,3.0.5,3.1,3.5.1,3.5.1c,3.5.2,3.6.5:base,4.7.00.0000,4.8.00.0000,4.8.00.0440,4.8.1,4.8.01:base,4.8.02.0010:base,4.9:base,5.0.00.340:base,5.0.01,5.0.01.0600:base,5.0.2.0090,5.0.02.0090:base,0490:base