CVE-2011-2040

Description

The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.5.3041, and 3.0.x before 3.0.629, on Linux and Mac OS X downloads a client executable file (vpndownloader.exe) without verifying its authenticity, which allows remote attackers to execute arbitrary code via the url property to a Java applet, aka Bug ID CSCsy05934.

Affected products

• Cisco / anyconnect_secure_mobility_client2.5.2019
• Cisco / anyconnect_secure_mobility_client2.0 – 2.0
• Cisco / anyconnect_secure_mobility_client2.1 – 2.1
• Cisco / anyconnect_secure_mobility_client2.2 – 2.2
• Cisco / anyconnect_secure_mobility_client2.2.128 – 2.2.128
• Cisco / anyconnect_secure_mobility_client2.2.133 – 2.2.133
• Cisco / anyconnect_secure_mobility_client2.2.136 – 2.2.136
• Cisco / anyconnect_secure_mobility_client2.2.140 – 2.2.140
• Cisco / anyconnect_secure_mobility_client2.3 – 2.3
• Cisco / anyconnect_secure_mobility_client2.3.185 – 2.3.185
• Cisco / anyconnect_secure_mobility_client2.3.254 – 2.3.254
• Cisco / anyconnect_secure_mobility_client2.3.2016 – 2.3.2016
• Cisco / anyconnect_secure_mobility_client2.4 – 2.4
• Cisco / anyconnect_secure_mobility_client2.4.0202 – 2.4.0202
• Cisco / anyconnect_secure_mobility_client2.4.1012 – 2.4.1012
• Cisco / anyconnect_secure_mobility_client2.5 – 2.5
• Cisco / anyconnect_secure_mobility_client2.5.1025 – 2.5.1025
• Cisco / anyconnect_secure_mobility_client2.5.2001 – 2.5.2001
• Cisco / anyconnect_secure_mobility_client2.5.2006 – 2.5.2006
• Cisco / anyconnect_secure_mobility_client2.5.2010 – 2.5.2010
• Cisco / anyconnect_secure_mobility_client2.5.2011 – 2.5.2011
• Cisco / anyconnect_secure_mobility_client2.5.2014 – 2.5.2014
• Cisco / anyconnect_secure_mobility_client2.5.2017 – 2.5.2017
• Cisco / anyconnect_secure_mobility_client2.5.2018 – 2.5.2018
• Cisco / anyconnect_secure_mobility_client3.0 – 3.0

References

• VENDOR_ADVISORYhttp://www.cisco.com/en/US/products/products_security_advisory09186a0080b80123.shtml
• MISChttp://labs.idefense.com/intelligence/vulnerabilities/display.php?id=910
• MISChttp://www.securitytracker.com/id?1025591
• MISChttp://www.kb.cert.org/vuls/id/490097
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/67739