what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

Files from Titon of Bastard Labs

iDEFENSE Security Advisory 2006-11-08.2

Posted Nov 9, 2006

Authored by iDefense Labs, Titon of Bastard Labs | Site idefense.com

iDefense Security Advisory 11.08.06 - Local exploitation of an insecure permissions vulnerability in Cisco Systems Secure Desktop product could allow privilege escalation attacks to be conducted by local users. When Cisco Secure Desktop Web VPN product is installed on a NTFS formatted drive, permissions are set on all files to grant full control to all users. Certain files run as a system service and can be easily replaced. iDefense has confirmed this vulnerability exists on Cisco Secure Desktop version 3.1.1.27. Previous versions are suspected to be vulnerable.

tags | advisory, web, local

systems | cisco

SHA-256 | 6dfd669d77800874e54b7955d01e2b2497788e1397cb113504ba0f650e44cf67

Download | Favorite | View