EDB-38303

PoC

Cisco AnyConnect 3.1.08009 - Local Privilege Escalation (via DMG Install Script)

view exploit source exploit_dbtype localauthor Yorick Kosterpublished 2015-09-23catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2015-6306UShigh7.2Exploit
Cisco AnyConnect Secure Mobility Client 4.1(8) on OS X and Linux does not verify pathnames before installation actions, which allows local users to obtain root privileges via a cra…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan