Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier allows local users to gain privileges via crafted IPC messages that trigger use of root privileges for a software-package installation, aka Bug ID CSCus79385.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0662
Reference (s):
- CISCO:20150314 Cisco AnyConnect Secure Mobility Client Arbitrary Code Execution Vulnerability
- URL: http://tools.cisco.com/security/center/viewAlert.x?alertId=37860
- SECTRACK:1031933
- URL: http://www.securitytracker.com/id/1031933