CVE-2013-1173

CVE-2013-1173 is a heap-based buffer overflow in ciscod.exe within the Cisco Security Service of Cisco AnyConnect Secure Mobility Client. Exploitation enables local privilege escalation to SYSTEM. Affected: Cisco AnyConnect Secure Mobility Client (Host Scan component) with vulnerable host-scan ha...

Viscosity ViscosityHelper Symlink Attack Local Privilege Escalation

The remote host has a version of Viscosity VPN client installed that has a path name validation flaw in the setuid-set ViscosityHelper binary. This flaw can be exploited to execute arbitrary code with root privileges. C Tenable Network Security, Inc. include"compat.inc"; if description...

Viscosity VPN Client Detection

The remote host has the Viscosity VPN client installed. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid65701; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06"; scriptxrefname:"IAVT", value:"0001-T-0918";...

Viscosity VPN Client Detection (Mac OS X)

The remote host has the Viscosity VPN client installed. TRUSTED...

Cisco VPN Client Unsupported

The Cisco VPN client installed on the remote host is no longer supported and is potentially affected by a denial of service vulnerability as well as other unacknowledged security issues. As of July 30, 2012, the vendor no longer provides security fixes for the installed product. Lack of support...

Command injection

The VPN driver in Cisco VPN Client on Windows does not properly interact with the kernel, which allows local users to cause a denial of service kernel fault and system crash via a crafted application, aka Bug ID CSCuc81669...

PT-2013-1797

Name of the Vulnerable Software and Affected Versions Cisco VPN Client version affected versions not specified Description The issue arises from the improper interaction between the VPN driver and the kernel in Cisco VPN Client on Windows. This allows local users to cause a denial of service,...

CVE-2012-5429: Undefined Security Weakness

The VPN driver in Cisco VPN Client on Windows does not properly interact with the kernel, which allows local users to cause a denial of service kernel fault and system crash via a crafted application, aka Bug ID CSCuc81669...

CVE-2012-3052

Untrusted search path vulnerability in Cisco VPN Client 5.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka Bug ID CSCua28747...

Design/Logic Flaw

Untrusted search path vulnerability in Cisco VPN Client 5.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka Bug ID CSCua28747...

CVE-2012-3052

Untrusted search path vulnerability in Cisco VPN Client 5.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka Bug ID CSCua28747...

CVE-2012-3052

The vulnerability CVE-2012-3052 affects Cisco VPN Client 5.x prior to 5.0.07.0440 and stems from untrusted DLL search path handling. An attacker with local access could place a Trojan DLL in the current working directory, which could be loaded and lead to privilege escalation. Publicly documented...

PT-2012-4456

Name of the Vulnerable Software and Affected Versions Cisco VPN Client version 5.0 Description The issue allows local users to gain privileges through a Trojan horse DLL in the current working directory. Recommendations For Cisco VPN Client version 5.0, consider restricting the search path to...

CVE-2012-3052: Undefined Security Weakness

Untrusted search path vulnerability in Cisco VPN Client 5.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka Bug ID CSCua28747...

Check Point Endpoint Security Remote Access Client Installed

Check Point Endpoint Security Remote Access Client, a software VPN client, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62075; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/01/31";...

Check Point Remote Access Client Insecure Library Loading

The version of Check Point Remote Access Client installed on the remote Windows host is earlier than E75.10 and is, therefore, reportedly affected by an insecure library loading vulnerability. If an attacker can trick a user on the affected system into opening a specially crafted file, they may b...

ZDI-12-149 : Cisco AnyConnect VPN Client Verification Bypass Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-149 : Cisco AnyConnect VPN Client Verification Bypass Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-149 August 22, 2012 - -- CVE ID: CVE-2012-2494 - -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C - -- Affected...

Cisco AnyConnect VPN Client Arbitrary Program Instantiation Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco AnyConnect VPN Client. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists due to...

Viscosity - Local Privilege Escalation

Viscosity - Local Privilege Escalation !/bin/sh Viscatory zx2c4 After the hullabaloo from the Tunnelblick local root, savy Mac users began defending Viscosity, another OS X VPN client. They figured, since they spent money on Viscosity, surely it would be better designed than the free open-source...

Viscosity OpenVPN OS X Local Root

!/bin/sh Viscatory zx2c4 After the hullabaloo from the Tunnelblick local root, savy Mac users began defending Viscosity, another OS X VPN client. They figured, since they spent money on Viscosity, surely it would be better designed than the free open-source alternative. Unfortunately, this exploi...