The Cisco trial client on Linux for Cisco AnyConnect SSL VPN allows local users to overwrite arbitrary files via a symlink attack on unspecified temporary files.
References
Configurations
Information
Published : 2010-10-13 22:52
Updated : 2010-11-10 22:44
NVD link : CVE-2009-5007
Mitre link : CVE-2009-5007
JSON object : View
CWE
CWE-59
Improper Link Resolution Before File Access ('Link Following')
Products Affected
cisco
- anyconnect_ssl_vpn