CVE-2015-6305

Related Files

Cisco AnyConnect Secure Mobility Client 3.1.08009 Privilege Elevation

Posted Oct 6, 2015

Authored by Google Security Research, forshaw

Cisco AnyConnect Secure Mobility Client version 3.1.08009 suffers from a privilege escalation vulnerability. The fix for CVE-2015-4211 is insufficient which allows a local application to elevate to local system through the CMainThread::launchDownloader command.

tags | exploit, local

systems | cisco, linux

advisories | CVE-2015-6305

SHA-256 | d8d8aba2be2bbe07e77874ac6db9c506cab1e1e1d4012296e7b37ab6841902a0

Download | Favorite | View

Cisco AnyConnect DLL Side Loading Privilege Escalation

Posted Sep 23, 2015

Authored by Yorick Koster, Securify B.V.

Cisco AnyConnect Secure Mobility Client for Windows is affected by an vulnerability that allows local attackers to execute arbitrary DLL files with elevated privilege. By exploiting this vulnerability is is possible for the attacker to gain SYSTEM privileges.

tags | exploit, arbitrary, local

systems | cisco, linux, windows

advisories | CVE-2015-6305

SHA-256 | 6e297eee712fe356db2c53d7b036bfdab4084dfcf2f39784ebf1a1798f5494f2

Download | Favorite | View