NVD

Id
27246  
Name
CVE-2015-6306  
Description
Cisco AnyConnect Secure Mobility Client 4.1(8) on OS X and Linux does not verify pathnames before installation actions, which allows local users to obtain root privileges via a crafted installation file, aka Bug ID CSCuv11947.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-09-25  
Modified Date
2016-12-12  
Seq
2015-6306  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
143703 27246 CVE-2015-6306 http://packetstormsecurity.com/files/133685/Cisco-AnyConnect-DMG-Install-Script-Privilege-Escalation.html  View
143704 27246 CVE-2015-6306 20150923 Cisco AnyConnect elevation of privileges via DMG install script  View
143705 27246 CVE-2015-6306 20150923 Cisco AnyConnect Secure Mobility Client for Linux and Mac OS X Privilege Escalation Vulnerability  View
143706 27246 CVE-2015-6306 20150923 Cisco AnyConnect elevation of privileges via DMG install script  View
143707 27246 CVE-2015-6306 1033656  View
143708 27246 CVE-2015-6306 38303  View
143709 27246 CVE-2015-6306 https://www.securify.nl/advisory/SFY20150701/cisco_anyconnect_elevation_%20of_privileges_via_dmg_install_script.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
9638 JVNDB-2015-004958 Mac OS X および Linux 上で稼働する Cisco AnyConnect Secure Mobility Client における root 権限を取得される脆弱性 Mac OS X および Linux 上で稼働する Cisco AnyConnect Secure Mobility Client は、インストール前にパス名を確認しないため、root 権限を取得される脆弱性が存在します。 CVE-2015-6306 83531 CVE-2015-6306 27246 7.2 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004958.html 2015-09-23 2015-09-30 View