Execution Error in Cisco Secure Desktop for AnyConnect SSL VPN
CVE-2009-5008

Currently unrated

Key Information:

Vendor
Cisco
Status
Secure Desktop
Vendor
CVE Published:
14 October 2010

Summary

Cisco Secure Desktop, when utilized with an AnyConnect SSL VPN server, exhibits a flaw where it inadequately performs verification checks. This oversight may allow local users to circumvent established policy restrictions by employing a modified executable file, thus potentially compromising system integrity and security.

References

http://www.infradead.org/openconnect.html
x_refsource_MISC

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.