CVE-2015-6305 : 詳細

CVE-2015-6305

2.64%V4
2015-09-25
01h00 +00:00
A08-Soft and Data Integrity Fail
Local
2024-08-06
07h15 +00:00
特定のCVEの通知
特定のCVEの変更情報をいち早くお届けします。
通知を管理する

CVE の説明

Untrusted search path vulnerability in the CMainThread::launchDownloader function in vpndownloader.exe in Cisco AnyConnect Secure Mobility Client 2.0 through 4.1 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by dbghelp.dll, aka Bug ID CSCuv01279. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-4211.

CVE の情報

関連する弱点

CWE-ID 弱点名 出典
CWE-426 Untrusted Search Path
The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.

メトリクス

メトリクス スコア 深刻度 CVSS ベクター 出典
V2 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C nvd@nist.gov

EPSS

EPSSは脆弱性が悪用される可能性を予測するスコアリングモデルです。

EPSSスコア

EPSSモデルは0から1(0〜100%)の確率スコアを算出します。スコアが高いほど、脆弱性が悪用される可能性が高いことを示します。

EPSSパーセンタイル

パーセンタイルはCVEをEPSSスコアで順位付けするために使用されます。例えば、EPSSスコアで95パーセンタイルにあるCVEは、他の95%のCVEよりも悪用される可能性が高いことを意味します。パーセンタイルはCVEのEPSSスコアを他のCVEと比較するために使用されます。

エクスプロイト情報

Exploit Database EDB-ID : 38289

公開日 : 2015-09-21 22h00 +00:00
著者 : Google Security Research
EDB検証済み : Yes

関連製品

構成 0

Cisco>>Anyconnect_secure_mobility_client >> Version 2.0.0343

Cisco>>Anyconnect_secure_mobility_client >> Version 2.1.0.148

Cisco>>Anyconnect_secure_mobility_client >> Version 2.2.0133

Cisco>>Anyconnect_secure_mobility_client >> Version 2.2.0136

Cisco>>Anyconnect_secure_mobility_client >> Version 2.2.0140

Cisco>>Anyconnect_secure_mobility_client >> Version 2.3.0185

Cisco>>Anyconnect_secure_mobility_client >> Version 2.3.0254

Cisco>>Anyconnect_secure_mobility_client >> Version 2.3.1003

Cisco>>Anyconnect_secure_mobility_client >> Version 2.3.2016

Cisco>>Anyconnect_secure_mobility_client >> Version 2.4.0202

Cisco>>Anyconnect_secure_mobility_client >> Version 2.4.1012

Cisco>>Anyconnect_secure_mobility_client >> Version 2.5.0217

Cisco>>Anyconnect_secure_mobility_client >> Version 2.5.2006

Cisco>>Anyconnect_secure_mobility_client >> Version 2.5.2010

Cisco>>Anyconnect_secure_mobility_client >> Version 2.5.2011

Cisco>>Anyconnect_secure_mobility_client >> Version 2.5.2014

Cisco>>Anyconnect_secure_mobility_client >> Version 2.5.2017

Cisco>>Anyconnect_secure_mobility_client >> Version 2.5.2018

Cisco>>Anyconnect_secure_mobility_client >> Version 2.5.2019

Cisco>>Anyconnect_secure_mobility_client >> Version 2.5.3041

Cisco>>Anyconnect_secure_mobility_client >> Version 2.5.3046

Cisco>>Anyconnect_secure_mobility_client >> Version 2.5.3051

Cisco>>Anyconnect_secure_mobility_client >> Version 2.5.3054

Cisco>>Anyconnect_secure_mobility_client >> Version 2.5.3055

Cisco>>Anyconnect_secure_mobility_client >> Version 2.5_base

Cisco>>Anyconnect_secure_mobility_client >> Version 3.0.0

Cisco>>Anyconnect_secure_mobility_client >> Version 3.0.0629

Cisco>>Anyconnect_secure_mobility_client >> Version 3.0.1047

Cisco>>Anyconnect_secure_mobility_client >> Version 3.0.2052

Cisco>>Anyconnect_secure_mobility_client >> Version 3.0.3050

Cisco>>Anyconnect_secure_mobility_client >> Version 3.0.3054

Cisco>>Anyconnect_secure_mobility_client >> Version 3.0.4235

Cisco>>Anyconnect_secure_mobility_client >> Version 3.0.5075

Cisco>>Anyconnect_secure_mobility_client >> Version 3.0.5080

Cisco>>Anyconnect_secure_mobility_client >> Version 3.0.09231

Cisco>>Anyconnect_secure_mobility_client >> Version 3.0.09266

Cisco>>Anyconnect_secure_mobility_client >> Version 3.0.09353

Cisco>>Anyconnect_secure_mobility_client >> Version 3.1\(60\)

Cisco>>Anyconnect_secure_mobility_client >> Version 3.1.0

Cisco>>Anyconnect_secure_mobility_client >> Version 3.1.02043

Cisco>>Anyconnect_secure_mobility_client >> Version 3.1.05182

Cisco>>Anyconnect_secure_mobility_client >> Version 3.1.05187

Cisco>>Anyconnect_secure_mobility_client >> Version 3.1.06073

Cisco>>Anyconnect_secure_mobility_client >> Version 3.1.07021

Cisco>>Anyconnect_secure_mobility_client >> Version 4.0\(48\)

Cisco>>Anyconnect_secure_mobility_client >> Version 4.0\(64\)

Cisco>>Anyconnect_secure_mobility_client >> Version 4.0\(2049\)

Cisco>>Anyconnect_secure_mobility_client >> Version 4.0.0

Cisco>>Anyconnect_secure_mobility_client >> Version 4.0.00048

Cisco>>Anyconnect_secure_mobility_client >> Version 4.0.00051

Cisco>>Anyconnect_secure_mobility_client >> Version 4.1.0

Microsoft>>Windows >> Version *

参考資料

http://www.securitytracker.com/id/1033643
Tags : vdb-entry, x_refsource_SECTRACK
https://www.exploit-db.com/exploits/38289/
Tags : exploit, x_refsource_EXPLOIT-DB
http://seclists.org/fulldisclosure/2015/Sep/80
Tags : mailing-list, x_refsource_FULLDISC