HackDig : Dig high-quality web security articles for hacker

Cisco AnyConnect elevation of privileges via DLL side loading

2015-09-22 19:00

------------------------------------------------------------------------
Cisco AnyConnect elevation of privileges via DLL side loading
------------------------------------------------------------------------
Yorick Koster, June 2015

------------------------------------------------------------------------
Abstract
------------------------------------------------------------------------
Cisco AnyConnect Secure Mobility Client for Windows is affected by an
vulnerability that allows local attackers to execute arbitrary DLL files
with elevated privilege. By exploiting this vulnerability is is possible
for the attacker to gain SYSTEM privileges.

------------------------------------------------------------------------
See also
------------------------------------------------------------------------
- CVE-2015-6305
- http://tools.cisco.com/security/center/viewAlert.x?alertId=41136
- https://code.google.com/p/google-security-research/issues/detail?id=460

------------------------------------------------------------------------
Test version
------------------------------------------------------------------------
This issue was successfully verified on Cisco AnyConnect Secure Mobility
Client for Windows version 3.1.08009.

------------------------------------------------------------------------
Fix
------------------------------------------------------------------------
There is currently no fix available. Updates are expected to be released
on September 30, 2015.

Cisco has released bug ID CSCuv01279 for registered users, which
contains additional details and an up-to-date list of affected product
versions.

------------------------------------------------------------------------
Details
------------------------------------------------------------------------
https://www.securify.nl/advisory/SFY20150601/cisco_anyconnect_elevation_of_privileges_via_dll_side_loading.html

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/


Source: 08/peS/5102/erusolcsidlluf/gro.stsilces

Read:2603 | Comments:0 | Tags:No Tag

“Cisco AnyConnect elevation of privileges via DLL side loading”0 Comments

Submit A Comment

Name:

Email:

Blog :

Verification Code:

Announce

Share high-quality web security related articles with you:)

Tools

Tag Cloud