Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco secure desktop 3.1.1.45 vulnerabilities and exploits

(subscribe to this query)
9.3
CVSSv2
CVE-2015-0691
A certain Cisco JAR file, as distributed in Cache Cleaner in Cisco Secure Desktop (CSD), allows remote malicious users to execute arbitrary commands via a crafted web site, aka Bug ID CSCup83001.
Cisco Secure Desktop 3.1.1Cisco Secure Desktop 3.0 BaseCisco Secure Desktop 3.4.1108Cisco Secure Desktop 3.5 BaseCisco Secure Desktop 3.5.841Cisco Secure Desktop 3.6 BaseCisco Secure Desktop 3.6.6228Cisco Secure Desktop 3.6.6210Cisco Secure Desktop 3.6.6203Cisco Secure Desktop 3.6.6104Cisco Secure Desktop 3.1 BaseCisco Secure Desktop 3.4.2048Cisco Secure Desktop 3.2.1.126Cisco Secure Desktop 3.3.0.151Cisco Secure Desktop 3.5.2001Cisco Secure Desktop 3.5.2008Cisco Secure Desktop 3.6.3002Cisco Secure Desktop 3.6.5005Cisco Secure Desktop 3.6.6249Cisco Secure Desktop 3.6.6020Cisco Secure Desktop 3.1.0.31Cisco Secure Desktop 3.1.1.45
4.6
CVSSv2
CVE-2006-5808
The installation of Cisco Secure Desktop (CSD) prior to 3.1.1.45 uses insecure default permissions (all users full control) for the CSD directory and its parent directory, which allow local users to gain privileges by replacing CSD executables, aka "Local Privilege Escalatio...
Cisco Secure Desktop 3.1.1.27Cisco Secure Desktop
4.6
CVSSv2
CVE-2006-5807
Cisco Secure Desktop (CSD) prior to 3.1.1.45 allows local users to escape out of the secure desktop environment by using certain applications that switch to the default desktop, aka "System Policy Evasion".
Cisco Secure Desktop
9.3
CVSSv2
CVE-2012-4655
The WebLaunch feature in Cisco Secure Desktop prior to 3.6.6020 does not properly validate binaries that are received by the downloader process, which allows remote malicious users to execute arbitrary code via vectors involving (1) ActiveX or (2) Java components, aka Bug IDs CSC...
Cisco Secure Desktop 3.4Cisco Secure Desktop 3.1.1.45Cisco Secure Desktop 3.6.3002Cisco Secure Desktop 3.2Cisco Secure Desktop 3.6Cisco Secure Desktop 3.5.2008Cisco Secure Desktop 3.4.2Cisco Secure Desktop 3.6.181Cisco Secure Desktop 3.1.1Cisco Secure Desktop 3.6.185Cisco Secure Desktop 3.1Cisco Secure Desktop 3.5.841Cisco Secure Desktop 3.4.2048Cisco Secure Desktop 3.4.1Cisco Secure Desktop 3.2.1Cisco Secure Desktop 3.5Cisco Secure Desktop 3.6.4021Cisco Secure Desktop 3.1.1.27Cisco Secure Desktop 3.1.1.33Cisco Secure Desktop 3.6.1001Cisco Secure Desktop 3.3Cisco Secure Desktop 3.6.2002
2.1
CVSSv2
CVE-2006-5806
SSL VPN Client in Cisco Secure Desktop prior to 3.1.1.45, when configured to spawn a web browser after a successful connection, stores sensitive browser session information in a directory outside of the CSD vault and does not restrict the user from saving files outside of the vau...
Cisco Secure Desktop
4.3
CVSSv2
CVE-2012-2495
The HostScan downloader implementation in Cisco AnyConnect Secure Mobility Client 3.x prior to 3.0 MR8 and Cisco Secure Desktop prior to 3.6.6020 does not compare the timestamp of offered software to the timestamp of installed software, which allows remote malicious users to forc...
Cisco Anyconnect Secure Mobility Client 3.0Cisco Secure Desktop 3.1.1.33Cisco Secure Desktop 3.4Cisco Secure Desktop 3.3Cisco Secure Desktop 3.5.2001Cisco Secure Desktop 3.2.1Cisco Secure Desktop 3.2Cisco Secure Desktop 3.1Cisco Secure Desktop 3.5.841Cisco Secure Desktop 3.4.2Cisco Secure Desktop 3.4.1Cisco Secure Desktop 3.4.2048Cisco Secure Desktop 3.1.1.45Cisco Secure Desktop 3.1.1.27Cisco Secure Desktop 3.1.1Cisco Secure Desktop 3.5Cisco Secure Desktop 3.5.1077Cisco Secure Desktop
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversalCVE-2024-26978CVE-2024-26982wirelessCVE-2023-6949CVE-2024-26980CVE-2024-32766CVE-2024-26939cache poisoning
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook