Cisco AnyConnect Secure Mobility Client CVE-2013-1130 Local Privilege Escalation Vulnerability
BID:62519
Info
Cisco AnyConnect Secure Mobility Client CVE-2013-1130 Local Privilege Escalation Vulnerability
| Bugtraq ID: | 62519 |
| Class: | Design Error |
| CVE: |
CVE-2013-1130 |
| Remote: | No |
| Local: | Yes |
| Published: | Sep 19 2013 12:00AM |
| Updated: | Sep 21 2013 12:14AM |
| Credit: | Cisco |
| Vulnerable: |
Cisco AnyConnect Secure Mobility Client 3.0 |
| Not Vulnerable: | |
Discussion
Cisco AnyConnect Secure Mobility Client CVE-2013-1130 Local Privilege Escalation Vulnerability
Cisco AnyConnect Secure Mobility Client is prone to a local privilege-escalation vulnerability.
A local attacker may exploit this issue to run arbitrary programs with elevated privileges.
This issue is being tracked by Cisco Bug ID CSCue33619.
Cisco AnyConnect Secure Mobility Client is prone to a local privilege-escalation vulnerability.
A local attacker may exploit this issue to run arbitrary programs with elevated privileges.
This issue is being tracked by Cisco Bug ID CSCue33619.
Exploit / POC
Cisco AnyConnect Secure Mobility Client CVE-2013-1130 Local Privilege Escalation Vulnerability
An attacker can exploit this issue using readily available tools.
An attacker can exploit this issue using readily available tools.
Solution / Fix
Cisco AnyConnect Secure Mobility Client CVE-2013-1130 Local Privilege Escalation Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Cisco AnyConnect Secure Mobility Client CVE-2013-1130 Local Privilege Escalation Vulnerability
References:
References:
- Cisco Homepage (Cisco )