Cisco Security Advisory: Windows VPN Client Local Privilege Escalation Vulnerability (05/24/2006)

A vulnerability was recently discovered in the Cisco Systems VPN Client for Windows which could allow an attacker to gain access to and full control of systems where the affected client is installed.  The full details of this vulnerability are available in the Cisco service advisory posted at the following URL: http://www.cisco.com/warp/public/707/cisco-sa-20060524-vpnclient.shtml

Drexel faculty or staff who use the VPN client on Windows systems are urged to install the new VPN client as soon as possible.  The latest WIndows client (version 4.8.01.0300) is now available from the Drexel Software Download site.  For VPN client download & installation instructions, please see our main VPN information page at http://www.drexel.edu/irt/support/vpn/

The VPN clients for non-Windows platforms (Macintosh, Linux or Solaris) are not affected by this vulnerability.