Hide.Me VPN Client 1.2.4 - Local Privilege Escalation

Hide.Me VPN Client 1.2.4 - Local Privilege Escalation Title: Hide.Me VPN Client - EoP: User to SYSTEM CWE Class: CWE-276: Incorrect Default Permissions Date: 01/06/2016 Vendor: eVenture Product: Hide.Me VPN Client Version: 1.2.4 Download link: https://hide.me/en/software/windows Tested on: Window...

SuperVPN Free VPN Client - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application SuperVPN Free VPN Client published at the 'play' market has multiple vulnerabilities...

Your Freedom VPN Client - Certificates or keys found, Customized SSL, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Your Freedom VPN Client published at the 'play' market has multiple vulnerabilities...

McAfee VPN Client - BSD license, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application McAfee VPN Client published at the 'play' market has multiple vulnerabilities...

Cisco VPN Client Elevation of Privilege Vulnerability

Cisco VPN Client is a cross-platform client software suite. Cisco VPN Client fails to properly assign permissions to the vpnclient.ini file, which can be elevated by a local attacker by entering an arbitrary process name into the 'Command' field of the ApplicationLauncher...

CVE-2015-7600: Undefined Security Weakness

Cisco VPN Client 5.x through 5.0.07.0440 uses weak permissions for vpnclient.ini, which allows local users to gain privileges by entering an arbitrary program name in the Command field of the ApplicationLauncher section...

PT-2015-7566

Name of the Vulnerable Software and Affected Versions Cisco VPN Client versions 5.x through 5.0.07.0440 Description The issue allows local users to gain privileges by entering an arbitrary program name in the Command field of the ApplicationLauncher section in the vpnclient.ini file, due to weak...

CVE-2015-4171

strongSwan 4.3.0 through 5.x before 5.3.2 and strongSwan VPN Client before 1.4.6, when using EAP or pre-shared keys for authenticating an IKEv2 connection, does not enforce server authentication restrictions until the entire authentication process is complete, which allows remote servers to obtai...

DEBIAN-CVE-2015-4171

strongSwan 4.3.0 through 5.x before 5.3.2 and strongSwan VPN Client before 1.4.6, when using EAP or pre-shared keys for authenticating an IKEv2 connection, does not enforce server authentication restrictions until the entire authentication process is complete, which allows remote servers to obtai...

strongSwan VPN Client DNS Spoofing Vulnerability

strongSwan is an open source IPsec-based VPN solution for Linux maintained by Andreas Steffen, a Swiss software developer. strongSwan VPN Client is one of these VPN clients. A security vulnerability exists in the strongSwan VPN Client. This vulnerability allows attackers to conduct...

Juniper Junos Pulse Client Privilege Escalation (JSA10644)

According to its self-reported version, the installation of Junos Pulse Client on the remote Windows host is version 4.0 prior to 4.0r6 or a version prior to 3.1r8. It is, therefore, affected by a privilege escalation vulnerability that allows a local attacker to gain administrative privileges vi...

Cisco VPN Client for Unix 3.5.1 - Local Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5056/info The Cisco VPN Client software is used to establish Virtual Private Network VPN connections between client machines and a Cisco VPN Concentrator. A vulnerability has been reported in some versions of the VPN...

PT-2020-7570

Name of the Vulnerable Software and Affected Versions: OpenConnect VPN client with GnuTLS versions prior to 5.02 Description: The issue is related to a heap overflow that occurs when the MTU is increased on reconnection. This problem is associated with the OpenConnect VPN client that uses GnuTLS...

CVE-2013-3415: Improper Restriction of Operations within the Bounds of a Memory Buffer

Cisco Adaptive Security Appliance ASA Software 8.4.x before 8.43 and 8.6.x before 8.61.3 does not properly manage memory upon an AnyConnect SSL VPN client disconnection, which allows remote attackers to cause a denial of service memory consumption, and forwarding outage or system hang via packets...

Juniper NetScreen VPN Client Multiple Buffer Overflow Vulnerabilities

The remote host is running a version of Juniper NetScreen VPN client that is affected by multiple buffer overflow vulnerabilities : - The IKE VPN service listening on UDP port 62514 is vulnerable to a stack overflow vulnerability that can be triggered by sending specially crafted packets...

Juniper NetScreen VPN Client Detection

The remote host has the Juniper NetScreen VPN Client installed. C Tenable Network Security. Inc. include"compat.inc"; if description scriptid70120; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06"; scriptxrefname:"IAVT", value:"0001-T-0914";...

Cisco Security Service File Verification Bypass Could Allow Elevation of Privilege

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability in the Cisco Host Scan component of Cisco AnyConnect Secure Mobility and Cisco Secure Desktop software. The vulnerability affects the Host Scan component included in Cisco AnyConnect VPN Clie...

Code injection

The vpnclient program in the Easy VPN component on Cisco Adaptive Security Appliances ASA 5505 devices allows local users to gain privileges via unspecified vectors, aka Bug ID CSCuf85295...

CVE-2013-1215

The vpnclient program in the Easy VPN component on Cisco Adaptive Security Appliances ASA 5505 devices allows local users to gain privileges via unspecified vectors, aka Bug ID CSCuf85295...

Heap overflow

Heap-based buffer overflow in ciscod.exe in the Cisco Security Service in Cisco AnyConnect Secure Mobility Client aka AnyConnect VPN Client allows local users to gain privileges via unspecified vectors, aka Bug ID CSCud14143...