Cisco AnyConnect VPN Client - ActiveX URL Property Download and Execute (Metasploit)

$Id: ciscoanyconnectexec.rb 12872 2011-06-06 20:15:51Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Cisco AnyConnect Secure Mobility Client Detection

Cisco AnyConnect Secure Mobility Client formerly known as Cisco AnyConnect VPN Client is installed on the remote Windows host. This software can be used for secure connectivity. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid54953; scriptversion"1.15";...

CVE-2011-2040

The helper application in Cisco AnyConnect Secure Mobility Client formerly AnyConnect VPN Client before 2.5.3041, and 3.0.x before 3.0.629, on Linux and Mac OS X downloads a client executable file vpndownloader.exe without verifying its authenticity, which allows remote attackers to execute...

NGS00051 Patch Notification: Cisco VPN Client Privilege Escalation

High Risk Vulnerability in Cisco VPN client Windows 64 bit 25 March 2011 Gavin Jones of NGS Secure has discovered a High risk vulnerability in the Cisco VPN client Windows 64 bit. Impact: Privilege Escalation Cisco has released a patch that addresses the issue. The announcement of this patch can ...

Juniper VPN client rdesktop clickhack

Juniper VPN client rdesktop clickhack ================================ discovered by [email protected] PRODUCT: Juniper VPN client + Windows remote desktop or console access VERSION AFFECTED: Win Vista/7 + Juniper VPN client all versions EXPOSURE: Remote code execution SYSTEM privileges SYNOPSIS...

Juniper VPN client unauthorized access

It's possible to execute Internet Explorer with System rights before authentication via remote session...

Juniper VPN Client rdesktop Click Hack

Juniper VPN client rdesktop clickhack ================================ discovered by [email protected] PRODUCT: Juniper VPN client + Windows remote desktop or console access VERSION AFFECTED: Win Vista/7 + Juniper VPN client all versions EXPOSURE: Remote code execution SYSTEM privileges SYNOPSIS...

[SECURITY] Fedora 14 Update: openconnect-2.25-1.fc14

This package provides a client for Cisco's "AnyConnect" VPN, which uses HTTPS and DTLS protocols...

TheGreenBow VPN Client TGB File OpenScriptAfterUp Parameter Local Overflow

The remote Windows host contains TheGreenBow VPN client, an IPsec VPN client. The installed version of TheGreenBow VPN Client is earlier than 4.65.003 or is an unpatched instance of 4.65.003. As such, it is reportedly affected by a local stack based buffer overflow caused by a boundary error when...

Security fix for the ALT Linux 9 package openssl1.1 version 0.9.8m-alt1

Feb. 26, 2010 Evgeny Sinelnikov 0.9.8m-alt1 - Updated to 0.9.8m with security fixes and improvements, including: + CVE-2009-3245, CVE-2008-1678 + CVE-2009-1377, CVE-2009-1378, CVE-2009-1379 + CVE-2009-1387 closes: 20280 + CVE-2009-4355 closes: 22817, 23037 + patch for Cisco VPN client DTLS...

Security fix for the ALT Linux 8 package openssl10 version 0.9.8m-alt1

Feb. 26, 2010 Evgeny Sinelnikov 0.9.8m-alt1 - Updated to 0.9.8m with security fixes and improvements, including: + CVE-2009-3245, CVE-2008-1678 + CVE-2009-1377, CVE-2009-1378, CVE-2009-1379 + CVE-2009-1387 closes: 20280 + CVE-2009-4355 closes: 22817, 23037 + patch for Cisco VPN client DTLS...

Security fix for the ALT Linux 9 package openssl10 version 0.9.8m-alt1

Feb. 26, 2010 Evgeny Sinelnikov 0.9.8m-alt1 - Updated to 0.9.8m with security fixes and improvements, including: + CVE-2009-3245, CVE-2008-1678 + CVE-2009-1377, CVE-2009-1378, CVE-2009-1379 + CVE-2009-1387 closes: 20280 + CVE-2009-4355 closes: 22817, 23037 + patch for Cisco VPN client DTLS...

TheGreenBow IPSec VPN Client Local Stack Overflow Vulnerability

TheGreenBow IPSec VPN Client is prone to a stack overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

TheGreenBow IPSec VPN Client Local Stack Overflow Vulnerability

This host has TheGreenBow IPSec VPN Client installed and is prone to Stack Overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodthegreenbowipsecvpnclientbofvuln.nasl 5401 2017-02-23 09:46:07Z teissa $ TheGreenBow IPSec VPN Client Local Stack Overflow Vulnerability Authors: Antu Sanadi...

Stack overflow

Stack-based buffer overflow in vpnconf.exe in TheGreenBow IPSec VPN Client 4.51.001, 4.65.003, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via a long OpenScriptAfterUp parameter in a policy .tgb file, related to "phase 2."...

CVE-2010-0392

The GreenBow IPSec VPN Client vulnerability CVE-2010-0392 is a stack-based overflow in vpnconf.exe. A long OpenScriptAfterUp parameter in a .tgb policy file (phase 2) can allow a user‑assisted remote attacker to execute arbitrary code in affected versions 4.51.001 and 4.65.003 (and possibly other...

CVE-2010-0392

Stack-based buffer overflow in vpnconf.exe in TheGreenBow IPSec VPN Client 4.51.001, 4.65.003, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via a long OpenScriptAfterUp parameter in a policy .tgb file, related to "phase 2."...

TheGreenBow VPN Client privilege escalation

Buffer overflow on IOCTL processing in tgbvpn.sys...

TheGreenBow VPN Client Local Stack Overflow Vulnerability - Security Advisory - SOS-10-001

TheGreenBow VPN Client Local Stack Overflow Vulnerability - Security Advisory - SOS-10-001 Release Date. 21-Jan-2010 Vendor Notification Date. 11-Dec-2009 Product. TheGreenBow VPN Client Platform. Microsoft Windows Affected versions. 4.65.003, 4.51.001 verified and possibly others. Severity Ratin...

NetBIOS Multiple IP Address Enumeration

By sending a special NetBIOS query, Nessus was able to detect the use of multiple IP addresses on the remote host. This indicates the host may be running virtualization software, a VPN client, or has multiple network interfaces. C Tenable Network Security, Inc. include"compat.inc"; if description...