Lucene search
CiscoCVELIST:CVE-2011-2039HistoryJun 02, 2011 - 7:00 p.m.
CVE-2011-2039
2011-06-0219:00:00
cisco
www.cve.org
1
The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.3.185 on Windows, and on Windows Mobile, downloads a client executable file (vpndownloader.exe) without verifying its authenticity, which allows remote attackers to execute arbitrary code via the url property to a certain ActiveX control in vpnweb.ocx, aka Bug ID CSCsy00904.
References
labs.idefense.com/intelligence/vulnerabilities/display.php?id=909
osvdb.org/72714
securityreason.com/securityalert/8272
www.cisco.com/en/US/products/products_security_advisory09186a0080b80123.shtml
www.kb.cert.org/vuls/id/490097
www.securitytracker.com/id?1025591
exchange.xforce.ibmcloud.com/vulnerabilities/67739
Related
checkpoint_advisories
checkpoint_advisories
Cisco AnyConnect VPN Client ActiveX Code Execution (CVE-2011-2039)
2011-08-16 00:00:00
securityvulns
securityvulns
iDefense Security Advisory 06.01.11: Cisco AnyConnect VPN Client Arbitrary Program Execution Vulnerability
2011-06-03 00:00:00
Cisco Security Advisory: Multiple Vulnerabilities in Cisco AnyConnect Secure Mobility Client
2011-06-02 00:00:00
Cisco AnyConnect Secure Mobility Client security vulnerabilities
2011-06-03 00:00:00
prion
prion
Design/Logic Flaw
2011-06-02 19:55:00
nvd
nvd
CVE-2011-2039
2011-06-02 19:55:04
packetstorm
packetstorm
Cisco AnyConnect VPN Client ActiveX URL Property Download and Execute
2011-06-07 00:00:00
cve
cve
CVE-2011-2039
2011-06-02 19:55:04
saint
saint
Cisco AnyConnect Secure Mobility Client VPNWeb ActiveX Code Execution
2011-06-13 00:00:00
Cisco AnyConnect Secure Mobility Client VPNWeb ActiveX Code Execution
2011-06-13 00:00:00
Cisco AnyConnect Secure Mobility Client VPNWeb ActiveX Code Execution
2011-06-13 00:00:00
cert
cert
Cisco AnyConnect SSL VPN arbitrary code execution
2011-06-07 00:00:00
nessus
nessus
Cisco AnyConnect Secure Mobility Client < 2.3.254 Multiple Vulnerabilities
2011-06-03 00:00:00
seebug
seebug
Cisco AnyConnect Secure Mobility Client任意代码执行及本地特权提升漏洞
2011-06-04 00:00:00