cbcvebase.
CVE-2011-2040
published 2011-06-02

CVE-2011-2040: The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.5.3041, and 3.0.x before 3.0.629, on Linux and Mac…

critical9.3CVSS 3.1
AVNACMAuNCCICAC
The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.5.3041, and 3.0.x before 3.0.629, on Linux and Mac OS X downloads a client executable file (vpndownloader.exe) without verifying its authenticity, which allows remote attackers to execute arbitrary code via the url property to a Java applet, aka Bug ID CSCsy05934.

Affected

26 ranges· showing 25
VendorProductVersion rangeFixed in
ciscoanyconnect_secure_mobility
ciscoanyconnect_secure_mobility_client<= 2.5.2019
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client
ciscoanyconnect_secure_mobility_client