Cisco Secure Desktop SSL VPN Session Multiple Information Disclosure Vulnerabilities

Bugtraq ID:	20410
Class:	Design Error
CVE:	CVE-2006-5393 CVE-2006-5394
Remote:	No
Local:	Yes
Published:	Oct 09 2006 12:00AM
Updated:	Jul 06 2016 02:06PM
Credit:	The vendor disclosed these issues.
Vulnerable:	Cisco Secure Desktop 3.1.1 Cisco Secure Desktop 3.1
Not Vulnerable:

Cisco Secure Desktop SSL VPN Session Multiple Information Disclosure Vulnerabilities

Cisco Secure Desktop is prone to multiple information-disclosure vulnerabilities.

Successfully exploiting these issues allows an attacker to gain access to potentially sensitive information; this may lead to other attacks.

Cisco Secure Desktop SSL VPN Session Multiple Information Disclosure Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Cisco Secure Desktop SSL VPN Session Multiple Information Disclosure Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for these issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco Secure Desktop SSL VPN Session Multiple Information Disclosure Vulnerabilities

References:

• Cisco Secure Desktop Homepage (Cisco)
  
• Document Recovery via Windows Printer Spool Files Workaround (Cisco)
  
• Information Leakage via Windows Paging File Workaround (Windows XP) (Microsoft)
  
• Information Leakage via Windows Paging File Workaround (Windows XP) (Microsoft)
  
• Cisco Security Advisory cisco-sa-20061009-csd (Cisco )