CVE-2013-1172: Improper Input Validation

The Cisco Security Service in Cisco AnyConnect Secure Mobility Client aka AnyConnect VPN Client does not properly verify files, which allows local users to gain privileges via unspecified vectors, aka Bug ID CSCud14153...

CVE-2013-1173: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in ciscod.exe in the Cisco Security Service in Cisco AnyConnect Secure Mobility Client aka AnyConnect VPN Client allows local users to gain privileges via unspecified vectors, aka Bug ID CSCud14143...

PT-2013-2941

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client affected versions not specified Description A heap-based buffer overflow issue in the ciscod.exe component of the Cisco Security Service allows local users to gain privileges. The issue can be exploited...

Cisco VPN Client Denial of Service Vulnerability

Cisco VPN Client contains a vulnerability that could allow an authenticated, local attacker to cause a denial of service DoS condition on a targeted system. The vulnerability is due to improper interaction between the VPN driver and the operating system kernel on a device running the vulnerable...

CVE-2012-3088: Undefined Security Weakness

Cisco AnyConnect Secure Mobility Client 3.1.x before 3.1.00495, and 3.2.x, does not check whether an HTTP request originally contains ScanSafe headers, which allows remote attackers to have an unspecified impact via a crafted request, aka Bug ID CSCua13166...

PT-2012-4470

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client versions 3.1.x before 3.1.00495 Cisco AnyConnect Secure Mobility Client version 3.2.x Description The issue allows remote attackers to have an unspecified impact via a crafted HTTP request, as the softwa...

PT-2012-4471

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client versions 3.1.x before 3.1.00495 Description The issue allows remote attackers to obtain sensitive information via vectors involving an invalid certificate. This occurs because the VPN downloader in the...

CVE-2012-3094: Exposure of Sensitive Information to an Unauthorized Actor

The VPN downloader in the downloadinstall component in Cisco AnyConnect Secure Mobility Client 3.1.x before 3.1.00495 on Linux accepts arbitrary X.509 server certificates without user interaction, which allows remote attackers to obtain sensitive information via vectors involving an invalid...

Cisco Products ActiveX Control Multiple Vulnerabilities

Cisco ASMC/Hostscan/Secure Desktop or Cisco ActiveX controls is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Cisco AnyConnect Secure Mobility Client 3.1 < 3.1(495) MiTM

The remote host has a version of Cisco AnyConnect 3.1 prior to 3.1495. As such, it prompts the user to decide whether or not to proceed when an untrusted certificate is seen. Accepting an untrusted certificate could result in a man-in-the-middle attack. C Tenable Network Security, Inc...

PT-2012-3208

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client version 3.0 before 3.0.08057 Description The issue allows remote authenticated users to cause a denial of service, resulting in the crash of the vpnagentd process, by sending a crafted packet...

CVE-2012-2500: Undefined Security Weakness

Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 does not verify the certificate name in an X.509 certificate during WebLaunch of IPsec, which allows man-in-the-middle attackers to spoof servers via a crafted certificate, aka Bug ID CSCtz29470...

CVE-2012-2498: Improper Authentication

Cisco AnyConnect Secure Mobility Client 3.0 through 3.0.08066 does not ensure that authentication makes use of a legitimate certificate, which allows user-assisted man-in-the-middle attackers to spoof servers via a crafted certificate, aka Bug ID CSCtz29197...

CVE-2012-1370: Improper Restriction of Operations within the Bounds of a Memory Buffer

Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 allows remote authenticated users to cause a denial of service vpnagentd process crash via a crafted packet, aka Bug ID CSCty01670...

PT-2012-4067

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client versions 3.0 through 3.0.08066 Description The issue allows user-assisted man-in-the-middle attackers to spoof servers via a crafted certificate, as the authentication does not make use of a legitimate...

PT-2012-4069

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client version 3.0 before 3.0.08057 Description The issue allows man-in-the-middle attackers to spoof servers via a crafted X.509 certificate during WebLaunch of IPsec, because the certificate name is not...

PT-2012-4068

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client version 3.0 before 3.0.08057 Description The issue is related to the IPsec implementation, which fails to verify the certificate name in an X.509 certificate. This allows man-in-the-middle attackers to...

CVE-2012-2499: Undefined Security Weakness

The IPsec implementation in Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 does not verify the certificate name in an X.509 certificate, which allows man-in-the-middle attackers to spoof servers via a crafted certificate, aka Bug ID CSCtz26985...

Cisco Security Advisory: Multiple Vulnerabilities in Cisco AnyConnect Secure Mobility Client

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Multiple Vulnerabilities in Cisco AnyConnect Secure Mobility Client Advisory ID: cisco-sa-20120620-ac Revision 1.0 For Public Release 2012 June 20 16:00 UTC GMT +--------------------------------------------------------------------- Summary ======= T...

CVE-2012-2493

The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 2.x before 2.5 MR6 on Windows, and 2.x before 2.5 MR6 and 3.x before 3.0 MR8 on Mac OS X and Linux, does not properly validate binaries that are received by the downloader process, which allows...