cisco secure desktop 3.1.1.27 vulnerabilities and exploits

(subscribe to this query)

The installation of Cisco Secure Desktop (CSD) prior to 3.1.1.45 uses insecure default permissions (all users full control) for the CSD directory and its parent directory, which allow local users to gain privileges by replacing CSD executables, aka "Local Privilege Escalatio...

Cisco Secure Desktop Cisco Secure Desktop 3.1.1.27

The Web Install ActiveX control (CSDWebInstaller) in Cisco Secure Desktop (CSD) prior to 3.5.841 does not properly verify the signatures of downloaded programs, which allows remote malicious users to force the download and execution of arbitrary files via a crafted web page, aka ...

Cisco Secure Desktop Cisco Secure Desktop 3.1 Cisco Secure Desktop 3.1.1 Cisco Secure Desktop 3.1.1.27 Cisco Secure Desktop 3.1.1.33 Cisco Secure Desktop 3.2 Cisco Secure Desktop 3.2.1 Cisco Secure Desktop 3.3 Cisco Secure Desktop 3.4 Cisco Secure Desktop 3.4.1 Cisco Secure Desktop 3.4.2 Cisco Secure Desktop 3.4.2048

The WebLaunch feature in Cisco Secure Desktop prior to 3.6.6020 does not properly validate binaries that are received by the downloader process, which allows remote malicious users to execute arbitrary code via vectors involving (1) ActiveX or (2) Java components, aka Bug IDs CSC...

Cisco Secure Desktop 3.1 Cisco Secure Desktop 3.1.1 Cisco Secure Desktop 3.1.1.27 Cisco Secure Desktop 3.1.1.33 Cisco Secure Desktop 3.1.1.45 Cisco Secure Desktop 3.2 Cisco Secure Desktop 3.2.1 Cisco Secure Desktop 3.3 Cisco Secure Desktop 3.4 Cisco Secure Desktop 3.4.1 Cisco Secure Desktop 3.4.2 Cisco Secure Desktop 3.4.2048

The HostScan downloader implementation in Cisco AnyConnect Secure Mobility Client 3.x prior to 3.0 MR8 and Cisco Secure Desktop prior to 3.6.6020 does not compare the timestamp of offered software to the timestamp of installed software, which allows remote malicious users to forc...

Cisco Anyconnect Secure Mobility Client 3.0 Cisco Secure Desktop Cisco Secure Desktop 3.1 Cisco Secure Desktop 3.1.1 Cisco Secure Desktop 3.1.1.27 Cisco Secure Desktop 3.1.1.33 Cisco Secure Desktop 3.1.1.45 Cisco Secure Desktop 3.2 Cisco Secure Desktop 3.2.1 Cisco Secure Desktop 3.3 Cisco Secure Desktop 3.4 Cisco Secure Desktop 3.4.1

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook