CVE-2013-1172

CVE-2013-1172 affects Cisco AnyConnect Secure Mobility Client (VPN Client) via the Host Scan component. The issue arises from how the Cisco Security Service/Host Scan handles messages for file manipulation, failing to verify files properly. This root cause enables a local, unprivileged user with ...

KLA10103 LPE vulnerability in Cisco AnyConnect

A buffer overflow was found in Cisco AnyConnect. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally. Original advisories Cisco bulletin Related products Cisco-AnyConnect-VPN-Client CVE list CVE-2013-1173 high Solution Update to latest...

Fedora Update for openconnect FEDORA-2013-2498

Check for the Version of openconnect OpenVAS Vulnerability Test Fedora Update for openconnect FEDORA-2013-2498 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Fedora Update for openconnect FEDORA-2013-2472

Check for the Version of openconnect OpenVAS Vulnerability Test Fedora Update for openconnect FEDORA-2013-2472 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

[SECURITY] Fedora 18 Update: openconnect-4.08-1.fc18

This package provides a client for Cisco's "AnyConnect" VPN, which uses HTTPS and DTLS protocols...

[SECURITY] Fedora 17 Update: openconnect-4.08-1.fc17

This package provides a client for Cisco's "AnyConnect" VPN, which uses HTTPS and DTLS protocols...

Debian Security Advisory DSA 2623-1 (openconnect - buffer overflow)

Kevin Cernekee discovered that a malicious VPN gateway can send crafted responses which trigger stack-based buffer overflows. OpenVAS Vulnerability Test $Id: deb2623.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA 2623-1 using nvtgen 1.0 Script version: 1.0 Author:...

Cisco VPN Client Unsupported

The Cisco VPN client installed on the remote host is no longer supported and is potentially affected by a denial of service vulnerability as well as other unacknowledged security issues. As of July 30, 2012, the vendor no longer provides security fixes for the installed product. Lack of support...

Cisco VPN Client Denial of Service Vulnerability

Cisco VPN Client contains a vulnerability that could allow an authenticated, local attacker to cause a denial of service DoS condition on a targeted system. The vulnerability is due to improper interaction between the VPN driver and the operating system kernel on a device running the vulnerable...

Cisco AnyConnect VPN Client Software Downgrade Code Execution (CVE-2012-2494)

A software downgrade vulnerability has been reported in Cisco AnyConnect Secure Mobility Client...

CVE-2012-3088

Cisco AnyConnect Secure Mobility Client 3.1.x before 3.1.00495, and 3.2.x, does not check whether an HTTP request originally contains ScanSafe headers, which allows remote attackers to have an unspecified impact via a crafted request, aka Bug ID CSCua13166...

CVE-2012-3094

The VPN downloader in the downloadinstall component in Cisco AnyConnect Secure Mobility Client 3.1.x before 3.1.00495 on Linux accepts arbitrary X.509 server certificates without user interaction, which allows remote attackers to obtain sensitive information via vectors involving an invalid...

Design/Logic Flaw

Cisco AnyConnect Secure Mobility Client 3.1.x before 3.1.00495, and 3.2.x, does not check whether an HTTP request originally contains ScanSafe headers, which allows remote attackers to have an unspecified impact via a crafted request, aka Bug ID CSCua13166...

Design/Logic Flaw

The VPN downloader in the downloadinstall component in Cisco AnyConnect Secure Mobility Client 3.1.x before 3.1.00495 on Linux accepts arbitrary X.509 server certificates without user interaction, which allows remote attackers to obtain sensitive information via vectors involving an invalid...

CVE-2012-3088

Cisco AnyConnect Secure Mobility Client 3.1.x (before 3.1.00495) and 3.2.x fails to verify whether an HTTP request contains ScanSafe headers, enabling remote attackers to trigger an unspecified impact via a crafted request (Bug ID CSCua13166). Affected component: AnyConnect client; root cause: la...

CVE-2012-3094

The VPN downloader in the downloadinstall component in Cisco AnyConnect Secure Mobility Client 3.1.x before 3.1.00495 on Linux accepts arbitrary X.509 server certificates without user interaction, which allows remote attackers to obtain sensitive information via vectors involving an invalid...

CVE-2012-3094

The CVE-2012-3094 entry concerns Cisco AnyConnect Secure Mobility Client 3.1.x prior to 3.1.00495 on Linux, where the VPN downloader in the download_install component accepts arbitrary X.509 server certificates without user interaction. This root cause enables remote attackers to obtain sensitive...

CVE-2012-3088

Cisco AnyConnect Secure Mobility Client 3.1.x before 3.1.00495, and 3.2.x, does not check whether an HTTP request originally contains ScanSafe headers, which allows remote attackers to have an unspecified impact via a crafted request, aka Bug ID CSCua13166...

Cisco Products ActiveX Control Multiple Vulnerabilities

Cisco ASMC/Hostscan/Secure Desktop or Cisco ActiveX controls is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Cisco Products ActiveX Control Multiple Vulnerabilities

This host is installed with Cisco ASMC/Hostscan/Secure Desktop or Cisco ActiveX controls and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbciscoprdtsactivexmultvuln.nasl 7172 2017-09-18 11:07:34Z cfischer $ Cisco Products ActiveX Control Multiple Vulnerabilities Authors:...