CVE-2015-0665 – The Hostscan module in Cisco AnyConnect Secure Mobility Client 4.0(.00051

4 years ago

The Hostscan module in Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier allows local users to write to arbitrary files via crafted IPC messages, aka Bug ID CSCus79173.

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0665

Reference (s):

CISCO:20150314 Cisco AnyConnect Secure Mobility Client Hostscan Path Traversal Vulnerability
URL: http://tools.cisco.com/security/center/viewAlert.x?alertId=37862
SECTRACK:1031931
URL: http://www.securitytracker.com/id/1031931