1033 matches found
CVE-2013-1130
Cisco AnyConnect Secure Mobility Client on Mac OS X uses weak permissions for a library directory, which allows local users to gain privileges via a crafted library file, aka Bug ID CSCue33619...
Design/Logic Flaw
Cisco AnyConnect Secure Mobility Client on Mac OS X uses weak permissions for a library directory, which allows local users to gain privileges via a crafted library file, aka Bug ID CSCue33619...
CVE-2013-1130
Cisco AnyConnect Secure Mobility Client on macOS is affected by weak permissions in a library directory (root cause: misconfigured library directory permissions), enabling local privilege escalation via a crafted library file (Bug ID CSCue33619). No patch/version details are provided in the suppl...
CVE-2013-1130
Cisco AnyConnect Secure Mobility Client on Mac OS X uses weak permissions for a library directory, which allows local users to gain privileges via a crafted library file, aka Bug ID CSCue33619...
Cisco Security Service File Verification Bypass Could Allow Elevation of Privilege
Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability in the Cisco Host Scan component of Cisco AnyConnect Secure Mobility and Cisco Secure Desktop software. The vulnerability affects the Host Scan component included in Cisco AnyConnect VPN Clie...
Cisco AnyConnect Secure Mobility Client 2.x / 3.x < 3.1(3103) Host Scan Multiple Vulnerabilities
The remote host has a version of Cisco AnyConnect 2.x or 3.x prior to 3.13103. It is, therefore, potentially affected by the following vulnerabilities : - A heap-based buffer overflow error exists in the file 'ciscod.exe'. CVE-2013-1173 / CSCud14143 - An unspecified error exists that could allow...
Cisco Host Scan Component of AnyConnect Secure Mobility and Secure Desktop Privilege Elevation Vulnerability
The Cisco Host Scan component of Cisco AnyConnect Secure Mobility and Cisco Secure Desktop contains multiple vulnerabilities that could allow a local, unprivileged user to elevate privileges to those of SYSTEM. Cisco has confirmed the vulnerability in a security notice and software updates are...
Cisco Host Scan Component of AnyConnect Secure Mobility and Secure Desktop Heap Overflow Vulnerability
The Cisco Host Scan component of Cisco AnyConnect Secure Mobility and Cisco Secure Desktop contains a heap overflow vulnerability that could allow a local, unprivileged user to elevate its privileges to those of SYSTEM. Cisco has confirmed the vulnerability in a security notice and software updat...
CVE-2013-1173
Heap-based buffer overflow in ciscod.exe in the Cisco Security Service in Cisco AnyConnect Secure Mobility Client aka AnyConnect VPN Client allows local users to gain privileges via unspecified vectors, aka Bug ID CSCud14143...
CVE-2013-1172
The Cisco Security Service in Cisco AnyConnect Secure Mobility Client aka AnyConnect VPN Client does not properly verify files, which allows local users to gain privileges via unspecified vectors, aka Bug ID CSCud14153...
Code injection
The Cisco Security Service in Cisco AnyConnect Secure Mobility Client aka AnyConnect VPN Client does not properly verify files, which allows local users to gain privileges via unspecified vectors, aka Bug ID CSCud14153...
Heap overflow
Heap-based buffer overflow in ciscod.exe in the Cisco Security Service in Cisco AnyConnect Secure Mobility Client aka AnyConnect VPN Client allows local users to gain privileges via unspecified vectors, aka Bug ID CSCud14143...
CVE-2013-1173
CVE-2013-1173 is a heap-based buffer overflow in ciscod.exe within the Cisco Security Service of Cisco AnyConnect Secure Mobility Client. Exploitation enables local privilege escalation to SYSTEM. Affected: Cisco AnyConnect Secure Mobility Client (Host Scan component) with vulnerable host-scan ha...
CVE-2013-1172
CVE-2013-1172 affects Cisco AnyConnect Secure Mobility Client (VPN Client) via the Host Scan component. The issue arises from how the Cisco Security Service/Host Scan handles messages for file manipulation, failing to verify files properly. This root cause enables a local, unprivileged user with ...
CVE-2013-1173
Heap-based buffer overflow in ciscod.exe in the Cisco Security Service in Cisco AnyConnect Secure Mobility Client aka AnyConnect VPN Client allows local users to gain privileges via unspecified vectors, aka Bug ID CSCud14143...
CVE-2013-1172
The Cisco Security Service in Cisco AnyConnect Secure Mobility Client aka AnyConnect VPN Client does not properly verify files, which allows local users to gain privileges via unspecified vectors, aka Bug ID CSCud14153...
KLA10103 LPE vulnerability in Cisco AnyConnect
A buffer overflow was found in Cisco AnyConnect. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally. Original advisories Cisco bulletin Related products Cisco-AnyConnect-VPN-Client CVE list CVE-2013-1173 high Solution Update to latest...
Fedora Update for openconnect FEDORA-2013-2472
Check for the Version of openconnect OpenVAS Vulnerability Test Fedora Update for openconnect FEDORA-2013-2472 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
Fedora Update for openconnect FEDORA-2013-2498
Check for the Version of openconnect OpenVAS Vulnerability Test Fedora Update for openconnect FEDORA-2013-2498 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
