CVE-2011-2041

The Start Before Logon SBL functionality in Cisco AnyConnect Secure Mobility Client formerly AnyConnect VPN Client before 2.3.254 on Windows, and on Windows Mobile, allows local users to gain privileges via unspecified user-interface interaction, aka Bug ID CSCta40556...

Code injection

The Start Before Logon SBL functionality in Cisco AnyConnect Secure Mobility Client formerly AnyConnect VPN Client before 2.3.254 on Windows, and on Windows Mobile, allows local users to gain privileges via unspecified user-interface interaction, aka Bug ID CSCta40556...

CVE-2011-2041

CVE-2011-2041 describes a Local Privilege Escalation in Cisco AnyConnect Secure Mobility Client on Windows (and Windows Mobile) via the Start Before Logon (SBL) UI. Unprivileged users can elevate to LocalSystem by interacting with the GUI at the Windows logon screen. The issue is restricted to Wi...