Code injection

Cisco Secure Desktop CSD, when used in conjunction with an AnyConnect SSL VPN server, does not properly perform verification, which allows local users to bypass intended policy restrictions via a modified executable file...

AnyConnect 1.2.3.0 Directory Traversal

Vulnerability ID: HTB22629 Reference: http://www.htbridge.ch/advisory/directorytraversalvulnerabilityinanyconnect.html Product: AnyConnect Vendor: AnyConnect http://www.anyconnect.net Vulnerable Version: 1.2.3.0 and Probably Prior Versions Vendor Notification: 27 September 2010 Vulnerability Type...

Directory Traversal Vulnerability in AnyConnect

Vulnerability ID: HTB22629 Reference: http://www.htbridge.ch/advisory/directorytraversalvulnerabilityinanyconnect.html Product: AnyConnect Vendor: AnyConnect http://www.anyconnect.net Vulnerable Version: 1.2.3.0 and Probably Prior Versions Vendor Notification: 27 September 2010 Vulnerability Type...

CVE-2009-5009

Double free vulnerability in OpenConnect before 1.40 might allow remote AnyConnect SSL VPN servers to cause a denial of service application crash or possibly have unspecified other impact via a crafted DTLS Cipher option during a reconnect operation...

CVE-2009-5009

OpenConnect vulnerability CVE-2009-5009: a double-free in the DTLS cipher option handling during reconnect on OpenConnect before 1.40 can cause denial of service (application crash) or unspecified impact on remote AnyConnect SSL VPN servers. Affected: OpenConnect

CVE-2009-5007

The Cisco trial client on Linux for Cisco AnyConnect SSL VPN allows local users to overwrite arbitrary files via a symlink attack on unspecified temporary files...

CVE-2010-3903

CVE-2010-3903 affects OpenConnect (before 2.23). The vulnerability allows remote denial of service (application crash) of an AnyConnect SSL VPN server by triggering a 404 HTTP response. The exact root cause, vulnerable component/file, and remediation are not detailed in the provided documents; ex...

CVE-2010-3901

OpenConnect before 2.25 does not properly validate X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary AnyConnect SSL VPN servers via a crafted server certificate that 1 does not correspond to the server hostname or 2 is presented in circumstances involving a missing...

CVE-2010-3901

OpenConnect before 2.25 is affected by CVE-2010-3901 due to improper validation of X.509 certificates, enabling MITM attacks where an attacker can spoof AnyConnect SSL VPN servers with a certificate that either does not match the server hostname or is presented when --cafile is not configured. Im...

CVE-2009-5007

The CVE-2009-5007 entry concerns the Cisco trial client on Linux for Cisco AnyConnect SSL VPN, where local users can overwrite arbitrary files via a symlink attack on unspecified temporary files. Affected component is the Linux client; root cause is a symlink-related path/temporary file handling ...

CVE-2010-3903

Unspecified vulnerability in OpenConnect before 2.23 allows remote AnyConnect SSL VPN servers to cause a denial of service application crash via a 404 HTTP status code...

CVE-2010-3901

OpenConnect before 2.25 does not properly validate X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary AnyConnect SSL VPN servers via a crafted server certificate that 1 does not correspond to the server hostname or 2 is presented in circumstances involving a missing...

CVE-2009-5008

Cisco Secure Desktop CSD, when used in conjunction with an AnyConnect SSL VPN server, does not properly perform verification, which allows local users to bypass intended policy restrictions via a modified executable file...

CVE-2009-5008: Undefined Security Weakness

Cisco Secure Desktop CSD, when used in conjunction with an AnyConnect SSL VPN server, does not properly perform verification, which allows local users to bypass intended policy restrictions via a modified executable file...

PT-2010-5157

Name of the Vulnerable Software and Affected Versions OpenConnect versions prior to 2.23 Description The issue allows remote AnyConnect SSL VPN servers to cause a denial of service, resulting in an application crash, by sending a 404 HTTP status code. Recommendations For versions prior to 2.23,...

CVE-2009-5007: Improper Link Resolution Before File Access

The Cisco trial client on Linux for Cisco AnyConnect SSL VPN allows local users to overwrite arbitrary files via a symlink attack on unspecified temporary files...

CVE-2010-3901: Improper Input Validation

OpenConnect before 2.25 does not properly validate X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary AnyConnect SSL VPN servers via a crafted server certificate that 1 does not correspond to the server hostname or 2 is presented in circumstances involving a missing...

PT-2010-1809

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect SSL VPN trial client on Linux affected versions not specified Description The issue allows local users to overwrite arbitrary files via a symlink attack on unspecified temporary files. Recommendations At the moment, there is n...

PT-2010-1810

Name of the Vulnerable Software and Affected Versions Cisco Secure Desktop CSD affected versions not specified Description The issue concerns Cisco Secure Desktop CSD when used with an AnyConnect SSL VPN server. It does not properly verify, allowing local users to bypass intended policy...

Directory Traversal Vulnerability in AnyConnect

High-Tech Bridge SA Security Research Lab has discovered vulnerability in AnyConnect which could be exploited to execute arbitrary code on vulnerable system. 1 Directory Traversal Vulnerability in AnyConnect: CVE-2010-4148 The vulnerability exists due to insufficient sanitation of the downloaded...