CVE-2015-0662 – Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier allows lo

4 years ago

Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier allows local users to gain privileges via crafted IPC messages that trigger use of root privileges for a software-package installation, aka Bug ID CSCus79385.

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0662

Reference (s):

CISCO:20150314 Cisco AnyConnect Secure Mobility Client Arbitrary Code Execution Vulnerability
URL: http://tools.cisco.com/security/center/viewAlert.x?alertId=37860
SECTRACK:1031933
URL: http://www.securitytracker.com/id/1031933