619 matches found
CVE-2014-9754: Improper Input Validation
The hardware VPN client in Viprinet MultichannelVPN Router 300 version 2013070830/2013080900 does not validate the remote VPN endpoint identity through the checking of the endpoint's SSL key before initiating the exchange, which allows an attacker to perform a Man in the Middle attack...
Cisco VPN Client 5.x < 5.0.07.0440 Untrusted Search Path DLL Privilege Escalation
The version of the Cisco VPN client installed on the remote host is 5.x prior to 5.0.07.0440. It is, therefore, affected by a flaw related to loading dynamic link library DLL files due to searching fixed paths that may not be trusted or under user control. A local attacker can exploit this, via a...
Cisco VPN Client 5.x <= 5.0.07.0440 vpnclient.ini Privilege Escalation
The version of the Cisco VPN client installed on the remote host is 5.x prior or equal to 5.0.07.0440. It is, therefore, affected by a flaw due to insecure permissions for file vpnclient.ini. A local attacker can exploit this, by inserting an arbitrary program name in the Command field of the...
Hide.Me VPN Client 1.2.4 - Privilege Escalation
Exploit for windows platform in category local exploits Title: Hide.Me VPN Client - EoP: User to SYSTEM CWE Class: CWE-276: Incorrect Default Permissions Date: 01/06/2016 Vendor: eVenture Product: Hide.Me VPN Client Version: 1.2.4 Download link: https://hide.me/en/software/windows Tested on:...
Hide.Me VPN Client 1.2.4 - Local Privilege Escalation
Hide.Me VPN Client 1.2.4 - Local Privilege Escalation Title: Hide.Me VPN Client - EoP: User to SYSTEM CWE Class: CWE-276: Incorrect Default Permissions Date: 01/06/2016 Vendor: eVenture Product: Hide.Me VPN Client Version: 1.2.4 Download link: https://hide.me/en/software/windows Tested on: Window...
SuperVPN Free VPN Client - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application SuperVPN Free VPN Client published at the 'play' market has multiple vulnerabilities...
Your Freedom VPN Client - Certificates or keys found, Customized SSL, Exported components vulnerabilities
HackApp vulnerability scanner discovered that application Your Freedom VPN Client published at the 'play' market has multiple vulnerabilities...
McAfee VPN Client - BSD license, Native code usage vulnerabilities
HackApp vulnerability scanner discovered that application McAfee VPN Client published at the 'play' market has multiple vulnerabilities...
Cisco VPN Client Elevation of Privilege Vulnerability
Cisco VPN Client is a cross-platform client software suite. Cisco VPN Client fails to properly assign permissions to the vpnclient.ini file, which can be elevated by a local attacker by entering an arbitrary process name into the 'Command' field of the ApplicationLauncher...
CVE-2015-7600: Undefined Security Weakness
Cisco VPN Client 5.x through 5.0.07.0440 uses weak permissions for vpnclient.ini, which allows local users to gain privileges by entering an arbitrary program name in the Command field of the ApplicationLauncher section...
DEBIAN-CVE-2015-4171
strongSwan 4.3.0 through 5.x before 5.3.2 and strongSwan VPN Client before 1.4.6, when using EAP or pre-shared keys for authenticating an IKEv2 connection, does not enforce server authentication restrictions until the entire authentication process is complete, which allows remote servers to obtai...
CVE-2015-4171
strongSwan 4.3.0 through 5.x before 5.3.2 and strongSwan VPN Client before 1.4.6, when using EAP or pre-shared keys for authenticating an IKEv2 connection, does not enforce server authentication restrictions until the entire authentication process is complete, which allows remote servers to obtai...
strongSwan VPN Client DNS Spoofing Vulnerability
strongSwan is an open source IPsec-based VPN solution for Linux maintained by Andreas Steffen, a Swiss software developer. strongSwan VPN Client is one of these VPN clients. A security vulnerability exists in the strongSwan VPN Client. This vulnerability allows attackers to conduct...
Juniper Junos Pulse Client Privilege Escalation (JSA10644)
According to its self-reported version, the installation of Junos Pulse Client on the remote Windows host is version 4.0 prior to 4.0r6 or a version prior to 3.1r8. It is, therefore, affected by a privilege escalation vulnerability that allows a local attacker to gain administrative privileges vi...
Cisco VPN Client for Unix 3.5.1 - Local Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5056/info The Cisco VPN Client software is used to establish Virtual Private Network VPN connections between client machines and a Cisco VPN Concentrator. A vulnerability has been reported in some versions of the VPN...
CVE-2013-3415: Improper Restriction of Operations within the Bounds of a Memory Buffer
Cisco Adaptive Security Appliance ASA Software 8.4.x before 8.43 and 8.6.x before 8.61.3 does not properly manage memory upon an AnyConnect SSL VPN client disconnection, which allows remote attackers to cause a denial of service memory consumption, and forwarding outage or system hang via packets...
Juniper NetScreen VPN Client Multiple Buffer Overflow Vulnerabilities
The remote host is running a version of Juniper NetScreen VPN client that is affected by multiple buffer overflow vulnerabilities : - The IKE VPN service listening on UDP port 62514 is vulnerable to a stack overflow vulnerability that can be triggered by sending specially crafted packets...
Juniper NetScreen VPN Client Detection
The remote host has the Juniper NetScreen VPN Client installed. C Tenable Network Security. Inc. include"compat.inc"; if description scriptid70120; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06"; scriptxrefname:"IAVT", value:"0001-T-0914";...
Cisco Security Service File Verification Bypass Could Allow Elevation of Privilege
Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability in the Cisco Host Scan component of Cisco AnyConnect Secure Mobility and Cisco Secure Desktop software. The vulnerability affects the Host Scan component included in Cisco AnyConnect VPN Clie...
