[SECURITY] Fedora 15 Update: openconnect-3.18-1.fc15

This package provides a client for Cisco's "AnyConnect" VPN, which uses HTTPS and DTLS protocols...

Cisco AnyConnect Portforwarder ActiveX Control Initialization Parameter Parsing Buffer Overflow

The remote Windows host has a version of the Cisco AnyConnect Portforwarder ActiveX control installed that contains a buffer overflow in its initialization parameters. A remote attacker could exploit this by tricking a user into viewing a specially crafted HTML document, resulting in arbitrary co...

Cisco AnyConnect Clientless SSL VPN Portforwarder ActiveX control buffer overflow

Overview The Cisco AnyConnect ActiveX control contains a buffer overflow vulnerability, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Cisco AnyConnect is an SSL VPN solution that is commonly initiated through use of a web browser...

Cisco AnyConnect VPN Client ActiveX Code Execution (CVE-2011-2039)

A remote code execution vulnerability has been reported in Cisco Anyconnect VPN Client. Annyconnect provides secured remote connection software solution for PCs and mobile devices. The vulnerability exists in the application VPN client's Activex control which aids in downloading and executing its...

Metasploit Framework 3.7.2 Released - Download

Metasploit Framework 3.7.2 Released - Download Metasploit Framework 3.7.2 includes 698 exploit modules, 358 auxiliary modules, and 54 post modules, 11 new exploits, 1 new auxiliary module, and 15 new post modules.This release addresses several issues with updating the framework, adds 11 exploit /...

Cisco AnyConnect Secure Mobility Client VPNWeb ActiveX Code Execution

Added: 06/13/2011 CVE: CVE-2011-2039 BID: 48081 OSVDB: 72714 Background Cisco AnyConnect Secure Mobility Client provides remote mobile users with secure IPsec IKEv2 or SSL Virtual Private Network VPN connections to Cisco 5500 Series Adaptive Security Appliances ASA and devices that are running...

Cisco AnyConnect Secure Mobility Client VPNWeb ActiveX Code Execution

Added: 06/13/2011 CVE: CVE-2011-2039 BID: 48081 OSVDB: 72714 Background Cisco AnyConnect Secure Mobility Client provides remote mobile users with secure IPsec IKEv2 or SSL Virtual Private Network VPN connections to Cisco 5500 Series Adaptive Security Appliances ASA and devices that are running...

Cisco AnyConnect Secure Mobility Client VPNWeb ActiveX Code Execution

Added: 06/13/2011 CVE: CVE-2011-2039 BID: 48081 OSVDB: 72714 Background Cisco AnyConnect Secure Mobility Client provides remote mobile users with secure IPsec IKEv2 or SSL Virtual Private Network VPN connections to Cisco 5500 Series Adaptive Security Appliances ASA and devices that are running...

Cisco AnyConnect Secure Mobility Client VPNWeb ActiveX Code Execution

Added: 06/13/2011 CVE: CVE-2011-2039 BID: 48081 OSVDB: 72714 Background Cisco AnyConnect Secure Mobility Client provides remote mobile users with secure IPsec IKEv2 or SSL Virtual Private Network VPN connections to Cisco 5500 Series Adaptive Security Appliances ASA and devices that are running...

Cisco AnyConnect VPN Client ActiveX URL Property Download and Execute

Exploit for windows platform in category remote exploits $Id: ciscoanyconnectexec.rb 12872 2011-06-06 20:15:51Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more...

Cisco AnyConnect VPN Client ActiveX URL Property Download and Execute

$Id: ciscoanyconnectexec.rb 12872 2011-06-06 20:15:51Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Cisco AnyConnect SSL VPN arbitrary code execution

Overview The Cisco AnyConnect SSL VPN ActiveX and Java clients contain a vulnerability that can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Cisco AnyConnect is an SSL VPN solution that is commonly initiated through use of a web browser...

Cisco AnyConnect VPN Client - ActiveX URL Property Download and Execute (Metasploit)

$Id: ciscoanyconnectexec.rb 12872 2011-06-06 20:15:51Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Cisco AnyConnect Secure Mobility Client任意代码执行及本地特权提升漏洞

Bugtraq ID: 48081,48087 CVE ID：CVE-2011-2039 CVE-2011-2040 CVE-2011-2041 Cisco AnyConnect Secure Mobility Client是思科公司提供的远端存取解决方案，是思科的下一代VPN客户端。 Cisco AnyConnect安全移动客户端存在如下漏洞： -任意程序执行漏洞CVE-2011-2040 当从VPN前端部署Cisco AnyConnect安全移动客户端时，会使用WEB浏览器向VPN前端初始化一个SSL连接。在用户登录后，浏览器会显示门户窗口，当用户点击"Start...

Cisco AnyConnect Secure Mobility Client Detection

Cisco AnyConnect Secure Mobility Client formerly known as Cisco AnyConnect VPN Client is installed on the remote Windows host. This software can be used for secure connectivity. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid54953; scriptversion"1.15";...

Cisco AnyConnect Secure Mobility Client security vulnerabilities

Local privilege escalation, signature is not checked for downloaded application components...

iDefense Security Advisory 06.01.11: Cisco AnyConnect VPN Client Arbitrary Program Execution Vulnerability

iDefense Security Advisory 06.01.11 http://labs.idefense.com/intelligence/vulnerabilities/ Jun 01, 2011 I. BACKGROUND Cisco's AnyConnect VPN solution provides remote access to customers via the Web browser. This is accomplished through the use of an ActiveX control. The control itself is provided...

Cisco AnyConnect Secure Mobility Client < 2.3.254 Multiple Vulnerabilities

The version of Cisco AnyConnect Secure Mobility Client installed on the remote host is earlier than 2.3.254 and may have the following vulnerabilities : - When the client is obtained from the VPN headend using a web browser, a helper application performs the download and installation. This helper...

CVE-2011-2041

The Start Before Logon SBL functionality in Cisco AnyConnect Secure Mobility Client formerly AnyConnect VPN Client before 2.3.254 on Windows, and on Windows Mobile, allows local users to gain privileges via unspecified user-interface interaction, aka Bug ID CSCta40556...

Code injection

The Start Before Logon SBL functionality in Cisco AnyConnect Secure Mobility Client formerly AnyConnect VPN Client before 2.3.254 on Windows, and on Windows Mobile, allows local users to gain privileges via unspecified user-interface interaction, aka Bug ID CSCta40556...