CVE-2012-2500

Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 does not verify the certificate name in an X.509 certificate during WebLaunch of IPsec, which allows man-in-the-middle attackers to spoof servers via a crafted certificate, aka Bug ID CSCtz29470...

CVE-2012-1370

Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 allows remote authenticated users to cause a denial of service vpnagentd process crash via a crafted packet, aka Bug ID CSCty01670...

CVE-2012-1370

Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 allows remote authenticated users to cause a denial of service vpnagentd process crash via a crafted packet, aka Bug ID CSCty01670...

Design/Logic Flaw

Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 allows remote authenticated users to cause a denial of service vpnagentd process crash via a crafted packet, aka Bug ID CSCty01670...

CVE-2012-1370

Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 allows remote authenticated users to cause a denial of service vpnagentd process crash via a crafted packet, aka Bug ID CSCty01670...

CVE-2012-1370

Cisco AnyConnect Secure Mobility Client 3.0 is affected by CVE-2012-1370 when using versions before 3.0.08057. The issue allows remote authenticated users to cause a denial of service by sending a crafted packet that crashes the vpnagentd process (Bug ID CSCty01670). The connected documents consi...

CVE-2012-1370: Improper Restriction of Operations within the Bounds of a Memory Buffer

Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 allows remote authenticated users to cause a denial of service vpnagentd process crash via a crafted packet, aka Bug ID CSCty01670...

PT-2012-3208

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client version 3.0 before 3.0.08057 Description The issue allows remote authenticated users to cause a denial of service, resulting in the crash of the vpnagentd process, by sending a crafted packet...

PT-2012-4067

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client versions 3.0 through 3.0.08066 Description The issue allows user-assisted man-in-the-middle attackers to spoof servers via a crafted certificate, as the authentication does not make use of a legitimate...

CVE-2012-2498: Improper Authentication

Cisco AnyConnect Secure Mobility Client 3.0 through 3.0.08066 does not ensure that authentication makes use of a legitimate certificate, which allows user-assisted man-in-the-middle attackers to spoof servers via a crafted certificate, aka Bug ID CSCtz29197...

PT-2012-4068

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client version 3.0 before 3.0.08057 Description The issue is related to the IPsec implementation, which fails to verify the certificate name in an X.509 certificate. This allows man-in-the-middle attackers to...

CVE-2012-2499: Undefined Security Weakness

The IPsec implementation in Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 does not verify the certificate name in an X.509 certificate, which allows man-in-the-middle attackers to spoof servers via a crafted certificate, aka Bug ID CSCtz26985...

CVE-2012-2500: Undefined Security Weakness

Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 does not verify the certificate name in an X.509 certificate during WebLaunch of IPsec, which allows man-in-the-middle attackers to spoof servers via a crafted certificate, aka Bug ID CSCtz29470...

PT-2012-4069

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client version 3.0 before 3.0.08057 Description The issue allows man-in-the-middle attackers to spoof servers via a crafted X.509 certificate during WebLaunch of IPsec, because the certificate name is not...

MacOSX Cisco AnyConnect Secure Mobility Client Multiple Vulnerabilities

The remote host has a version of Cisco AnyConnect 2.5 MR6 / 3.0 MR8. Such versions are potentially affected by multiple vulnerabilities : - The WebLaunch VPN downloader implementation does not properly validate binaries that are received, which can allow remote attackers to execute arbitrary code...

MacOSX Cisco AnyConnect Secure Mobility Client Detection

Cisco AnyConnect Secure Mobility Client formerly known as Cisco AnyConnect VPN Client is installed on the remote host. This software can be used for secure connectivity. TRUSTED...

Cisco AnyConnect Secure Mobility Client 3.0 < 3.0 MR8 Multiple Vulnerabilities

The remote host has a version of Cisco AnyConnect 3.0 MR8. Such versions are affected by the following vulnerabilities : - The HostScan VPN downloader implementation does not compare timestamps of offered software to install with currently installed software, which may allow remote attackers to...

Cisco AnyConnect Secure Mobility Client VPN Downloader RCE (cisco-sa-20120620-ac)

The remote host has a version of Cisco AnyConnect 2.5 MR6. Such versions are potentially affected by an arbitrary code execution vulnerability. The WebLaunch VPN downloader implementation does not properly validate binaries that are received, which can allow remote attackers to execute arbitrary...

Cisco AnyConnect Secure Mobility Client VPN Downgrade

The remote host has a version of Cisco AnyConnect 2.5 MR6 / 3.0 MR8. Such versions are potentially affected by a software downgrade vulnerability. The WebLaunch VPN downloader implementation does not compare timestamps of offered software to install with currently installed software, which may...

Debian DSA-2495-1 : openconnect - buffer overflow

A buffer overflow was discovered in OpenConnect, a client for the Cisco AnyConnect VPN, which could result in denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-2495. The...