FKIE_CVE-2011-2041

Vulnerability from fkie_nvd - Published: 2011-06-02 20:55 - Updated: 2025-04-11 00:51
Severity ?
Summary
The Start Before Logon (SBL) functionality in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.3.254 on Windows, and on Windows Mobile, allows local users to gain privileges via unspecified user-interface interaction, aka Bug ID CSCta40556.
References
psirt@cisco.comhttp://osvdb.org/72716
psirt@cisco.comhttp://www.cisco.com/en/US/products/products_security_advisory09186a0080b80123.shtmlVendor Advisory
psirt@cisco.comhttp://www.securityfocus.com/bid/48077
psirt@cisco.comhttp://www.securitytracker.com/id?1025591
af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/72716
af854a3a-2127-422b-91ae-364da2661108http://www.cisco.com/en/US/products/products_security_advisory09186a0080b80123.shtmlVendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/48077
af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id?1025591
Impacted products
Vendor Product Version
cisco anyconnect_secure_mobility_client *
cisco anyconnect_secure_mobility_client 2.0
cisco anyconnect_secure_mobility_client 2.1
cisco anyconnect_secure_mobility_client 2.2
cisco anyconnect_secure_mobility_client 2.2.128
cisco anyconnect_secure_mobility_client 2.2.133
cisco anyconnect_secure_mobility_client 2.2.136
cisco anyconnect_secure_mobility_client 2.2.140
cisco anyconnect_secure_mobility_client 2.3
cisco anyconnect_secure_mobility_client 2.3.185
microsoft windows *
microsoft windows_mobile *
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A5E277CA-0339-4883-B846-1996DBB3ECB8",
              "versionEndIncluding": "2.3.2016",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "6B522088-2084-491B-98F0-3E3CCD88131F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "DA179B71-AC81-4587-8FB1-0466B2550975",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "210B66BB-4E2C-4D9E-BFBB-69916A42287C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.2.128:*:*:*:*:*:*:*",
              "matchCriteriaId": "B77EB2C9-BACE-46EA-AA72-FF1C7EB1A5F4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.2.133:*:*:*:*:*:*:*",
              "matchCriteriaId": "06527370-E73A-40FF-8E02-E0337536C7C1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.2.136:*:*:*:*:*:*:*",
              "matchCriteriaId": "A617295C-F518-4BC7-8442-E476448D8F01",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.2.140:*:*:*:*:*:*:*",
              "matchCriteriaId": "E71A1D6B-8E87-4E3A-A1AE-DE44C2C348F9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "B8AD6158-17AB-443D-8EC1-5FDE5852CAEC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.3.185:*:*:*:*:*:*:*",
              "matchCriteriaId": "0BBF395D-9E90-44C1-8E99-3631FFF24487",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_mobile:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D553418E-61B6-4BCA-9260-693260A9BB86",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Start Before Logon (SBL) functionality in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.3.254 on Windows, and on Windows Mobile, allows local users to gain privileges via unspecified user-interface interaction, aka Bug ID CSCta40556."
    },
    {
      "lang": "es",
      "value": "La funcionalidad de comienzo Antes de inicio de sesi\u00f3n (SBL) en Cisco Secure Mobility AnyConnect Client (anteriormente AnyConnect  VPN Client) antes de v2.3.254 en Windows, y Windows Mobile, permite a usuarios locales conseguir privilegios a trav\u00e9s de una interacci\u00f3n no especificada con la interfaz de usuario. Error tambi\u00e9n conocido como Bug ID CSCta40556."
    }
  ],
  "id": "CVE-2011-2041",
  "lastModified": "2025-04-11T00:51:21.963",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 7.2,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 10.0,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2011-06-02T20:55:03.543",
  "references": [
    {
      "source": "psirt@cisco.com",
      "url": "http://osvdb.org/72716"
    },
    {
      "source": "psirt@cisco.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b80123.shtml"
    },
    {
      "source": "psirt@cisco.com",
      "url": "http://www.securityfocus.com/bid/48077"
    },
    {
      "source": "psirt@cisco.com",
      "url": "http://www.securitytracker.com/id?1025591"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/72716"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b80123.shtml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/48077"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id?1025591"
    }
  ],
  "sourceIdentifier": "psirt@cisco.com",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.