1058 matches found
CVE-2011-2041
The Start Before Logon SBL functionality in Cisco AnyConnect Secure Mobility Client formerly AnyConnect VPN Client before 2.3.254 on Windows, and on Windows Mobile, allows local users to gain privileges via unspecified user-interface interaction, aka Bug ID CSCta40556...
CVE-2011-2041
CVE-2011-2041 describes a Local Privilege Escalation in Cisco AnyConnect Secure Mobility Client on Windows (and Windows Mobile) via the Start Before Logon (SBL) UI. Unprivileged users can elevate to LocalSystem by interacting with the GUI at the Windows logon screen. The issue is restricted to Wi...
CVE-2011-2040
The helper application in Cisco AnyConnect Secure Mobility Client formerly AnyConnect VPN Client before 2.5.3041, and 3.0.x before 3.0.629, on Linux and Mac OS X downloads a client executable file vpndownloader.exe without verifying its authenticity, which allows remote attackers to execute...
CVE-2011-2039
The helper application in Cisco AnyConnect Secure Mobility Client formerly AnyConnect VPN Client before 2.3.185 on Windows, and on Windows Mobile, downloads a client executable file vpndownloader.exe without verifying its authenticity, which allows remote attackers to execute arbitrary code via t...
Design/Logic Flaw
The helper application in Cisco AnyConnect Secure Mobility Client formerly AnyConnect VPN Client before 2.5.3041, and 3.0.x before 3.0.629, on Linux and Mac OS X downloads a client executable file vpndownloader.exe without verifying its authenticity, which allows remote attackers to execute...
DSquare Exploit Pack: D2SEC_CISCOANY
Name| d2secciscoany ---|--- CVE| CVE-2011-2040 Exploit Pack| D2ExploitPack Description| Cisco AnyConnect VPN Client Arbitrary Program Execution Vulnerability Notes|...
Design/Logic Flaw
The helper application in Cisco AnyConnect Secure Mobility Client formerly AnyConnect VPN Client before 2.3.185 on Windows, and on Windows Mobile, downloads a client executable file vpndownloader.exe without verifying its authenticity, which allows remote attackers to execute arbitrary code via t...
CVE-2011-2039
The helper application in Cisco AnyConnect Secure Mobility Client formerly AnyConnect VPN Client before 2.3.185 on Windows, and on Windows Mobile, downloads a client executable file vpndownloader.exe without verifying its authenticity, which allows remote attackers to execute arbitrary code via t...
CVE-2011-2040
Summary of CVE-2011-2040 (Cisco AnyConnect Arbitrary Program Execution) : The helper application used during pre-deployment downloads the Cisco AnyConnect client via a web browser without authenticating the downloaded executable (vpndownloader.exe) on Linux and Mac OS X, enabling remote code exec...
CVE-2011-2039
Cisco AnyConnect Secure Mobility Client (Windows and Windows Mobile)
CVE-2011-2040
The helper application in Cisco AnyConnect Secure Mobility Client formerly AnyConnect VPN Client before 2.5.3041, and 3.0.x before 3.0.629, on Linux and Mac OS X downloads a client executable file vpndownloader.exe without verifying its authenticity, which allows remote attackers to execute...
Cisco Security Advisory: Multiple Vulnerabilities in Cisco AnyConnect Secure Mobility Client
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Multiple Vulnerabilities in Cisco AnyConnect Secure Mobility Client Advisory ID: cisco-sa-20110601-ac Revision 1.0 For Public Release 2011 June 01 1600 UTC GMT...
Cisco Releases Security Advisories for Multiple Products
Cisco has released security advisories for four products to address multiple vulnerabilities. These products include Cisco Unified IP phones, Cisco Network Registrar, Cisco AnyConnect Secure Mobility Client, and Cisco Media Experience. Exploitation of the vulnerabilities may allow an attacker to...
Multiple Vulnerabilities in Cisco AnyConnect Secure Mobility Client
...
Cisco AnyConnect VPN Client ActiveX URL Property Download and Execute
This module exploits a vulnerability in the Cisco AnyConnect VPN client vpnweb.ocx ActiveX control. This control is typically used to install the VPN client. An attacker can set the 'url' property which is where the control tries to locate the files needed to install the client. The control tries...
Fedora Update for openconnect FEDORA-2010-18055
Check for the Version of openconnect OpenVAS Vulnerability Test Fedora Update for openconnect FEDORA-2010-18055 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...
Fedora Update for openconnect FEDORA-2010-18053
Check for the Version of openconnect OpenVAS Vulnerability Test Fedora Update for openconnect FEDORA-2010-18053 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...
Fedora Update for openconnect FEDORA-2010-18032
Check for the Version of openconnect OpenVAS Vulnerability Test Fedora Update for openconnect FEDORA-2010-18032 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...
Fedora Update for openconnect FEDORA-2010-13034
Check for the Version of openconnect OpenVAS Vulnerability Test Fedora Update for openconnect FEDORA-2010-13034 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...
