cisco secure desktop 3.1.1.45 vulnerabilities and exploits

(subscribe to this query)

A certain Cisco JAR file, as distributed in Cache Cleaner in Cisco Secure Desktop (CSD), allows remote malicious users to execute arbitrary commands via a crafted web site, aka Bug ID CSCup83001.

Cisco Secure Desktop 3.0 Base Cisco Secure Desktop 3.1.0.31 Cisco Secure Desktop 3.1.1 Cisco Secure Desktop 3.1.1.45 Cisco Secure Desktop 3.1 Base Cisco Secure Desktop 3.2.0.136 Cisco Secure Desktop 3.2.1.103 Cisco Secure Desktop 3.2.1.126 Cisco Secure Desktop 3.2 Base Cisco Secure Desktop 3.3.0.118 Cisco Secure Desktop 3.3.0.151 Cisco Secure Desktop 3.3 Base

The WebLaunch feature in Cisco Secure Desktop prior to 3.6.6020 does not properly validate binaries that are received by the downloader process, which allows remote malicious users to execute arbitrary code via vectors involving (1) ActiveX or (2) Java components, aka Bug IDs CSC...

Cisco Secure Desktop 3.1 Cisco Secure Desktop 3.1.1 Cisco Secure Desktop 3.1.1.27 Cisco Secure Desktop 3.1.1.33 Cisco Secure Desktop 3.1.1.45 Cisco Secure Desktop 3.2 Cisco Secure Desktop 3.2.1 Cisco Secure Desktop 3.3 Cisco Secure Desktop 3.4 Cisco Secure Desktop 3.4.1 Cisco Secure Desktop 3.4.2 Cisco Secure Desktop 3.4.2048

The HostScan downloader implementation in Cisco AnyConnect Secure Mobility Client 3.x prior to 3.0 MR8 and Cisco Secure Desktop prior to 3.6.6020 does not compare the timestamp of offered software to the timestamp of installed software, which allows remote malicious users to forc...

Cisco Anyconnect Secure Mobility Client 3.0 Cisco Secure Desktop Cisco Secure Desktop 3.1 Cisco Secure Desktop 3.1.1 Cisco Secure Desktop 3.1.1.27 Cisco Secure Desktop 3.1.1.33 Cisco Secure Desktop 3.1.1.45 Cisco Secure Desktop 3.2 Cisco Secure Desktop 3.2.1 Cisco Secure Desktop 3.3 Cisco Secure Desktop 3.4 Cisco Secure Desktop 3.4.1

The installation of Cisco Secure Desktop (CSD) prior to 3.1.1.45 uses insecure default permissions (all users full control) for the CSD directory and its parent directory, which allow local users to gain privileges by replacing CSD executables, aka "Local Privilege Escalatio...

Cisco Secure Desktop Cisco Secure Desktop 3.1.1.27

Cisco Secure Desktop (CSD) prior to 3.1.1.45 allows local users to escape out of the secure desktop environment by using certain applications that switch to the default desktop, aka "System Policy Evasion".

Cisco Secure Desktop

SSL VPN Client in Cisco Secure Desktop prior to 3.1.1.45, when configured to spawn a web browser after a successful connection, stores sensitive browser session information in a directory outside of the CSD vault and does not restrict the user from saving files outside of the vau...

Cisco Secure Desktop

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook