1227 matches found
Design/Logic Flaw
The helper application in Cisco AnyConnect Secure Mobility Client formerly AnyConnect VPN Client before 2.5.3041, and 3.0.x before 3.0.629, on Linux and Mac OS X downloads a client executable file vpndownloader.exe without verifying its authenticity, which allows remote attackers to execute...
CVE-2011-2040
The helper application in Cisco AnyConnect Secure Mobility Client formerly AnyConnect VPN Client before 2.5.3041, and 3.0.x before 3.0.629, on Linux and Mac OS X downloads a client executable file vpndownloader.exe without verifying its authenticity, which allows remote attackers to execute...
CVE-2011-2039
Cisco AnyConnect Secure Mobility Client (Windows and Windows Mobile)
CVE-2011-2040
Summary of CVE-2011-2040 (Cisco AnyConnect Arbitrary Program Execution) : The helper application used during pre-deployment downloads the Cisco AnyConnect client via a web browser without authenticating the downloaded executable (vpndownloader.exe) on Linux and Mac OS X, enabling remote code exec...
CVE-2011-2039
The helper application in Cisco AnyConnect Secure Mobility Client formerly AnyConnect VPN Client before 2.3.185 on Windows, and on Windows Mobile, downloads a client executable file vpndownloader.exe without verifying its authenticity, which allows remote attackers to execute arbitrary code via t...
PT-2011-3562
Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client versions prior to 2.3.254 Description The issue concerns the Start Before Logon SBL functionality, which allows local users to gain privileges through unspecified user-interface interaction...
CVE-2011-2041: Undefined Security Weakness
The Start Before Logon SBL functionality in Cisco AnyConnect Secure Mobility Client formerly AnyConnect VPN Client before 2.3.254 on Windows, and on Windows Mobile, allows local users to gain privileges via unspecified user-interface interaction, aka Bug ID CSCta40556...
Cisco Security Advisory: Multiple Vulnerabilities in Cisco AnyConnect Secure Mobility Client
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Multiple Vulnerabilities in Cisco AnyConnect Secure Mobility Client Advisory ID: cisco-sa-20110601-ac Revision 1.0 For Public Release 2011 June 01 1600 UTC GMT...
PT-2011-3561
Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client versions prior to 2.5.3041 Cisco AnyConnect Secure Mobility Client versions 3.0.x prior to 3.0.629 Description The issue allows remote attackers to execute arbitrary code via the url property to a Java...
CVE-2011-2040: Improper Input Validation
The helper application in Cisco AnyConnect Secure Mobility Client formerly AnyConnect VPN Client before 2.5.3041, and 3.0.x before 3.0.629, on Linux and Mac OS X downloads a client executable file vpndownloader.exe without verifying its authenticity, which allows remote attackers to execute...
Cisco Releases Security Advisories for Multiple Products
Cisco has released security advisories for four products to address multiple vulnerabilities. These products include Cisco Unified IP phones, Cisco Network Registrar, Cisco AnyConnect Secure Mobility Client, and Cisco Media Experience. Exploitation of the vulnerabilities may allow an attacker to...
PT-2011-3560
Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client versions prior to 2.3.185 Description The issue allows remote attackers to execute arbitrary code due to the helper application downloading a client executable file without verifying its authenticity. Th...
CVE-2011-2039: Improper Input Validation
The helper application in Cisco AnyConnect Secure Mobility Client formerly AnyConnect VPN Client before 2.3.185 on Windows, and on Windows Mobile, downloads a client executable file vpndownloader.exe without verifying its authenticity, which allows remote attackers to execute arbitrary code via t...
Multiple Vulnerabilities in Cisco AnyConnect Secure Mobility Client
...
Cisco AnyConnect VPN Client ActiveX URL Property Download and Execute
This module exploits a vulnerability in the Cisco AnyConnect VPN client vpnweb.ocx ActiveX control. This control is typically used to install the VPN client. An attacker can set the 'url' property which is where the control tries to locate the files needed to install the client. The control tries...
Fedora Update for openconnect FEDORA-2010-18053
Check for the Version of openconnect OpenVAS Vulnerability Test Fedora Update for openconnect FEDORA-2010-18053 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...
Fedora Update for openconnect FEDORA-2010-18055
Check for the Version of openconnect OpenVAS Vulnerability Test Fedora Update for openconnect FEDORA-2010-18055 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...
Fedora Update for openconnect FEDORA-2010-18032
Check for the Version of openconnect OpenVAS Vulnerability Test Fedora Update for openconnect FEDORA-2010-18032 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...
Fedora Update for openconnect FEDORA-2010-13034
Check for the Version of openconnect OpenVAS Vulnerability Test Fedora Update for openconnect FEDORA-2010-13034 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...
