cisco anyconnect secure mobility client is already installed mac

However, the script appears to be broken. In theory an attacker could create a DMG file containing a specially crafted PKG file that can be installed via An圜onnect. PKG files are only installed if they are named: This script allows a PKG file, located in a DMG file, to be installed as root. One of the executables that can be invoked is install-dmg.sh, which is located in /opt/cisco/anyconnect/bin/vpndownloader.app/Contents/Resources/. An圜onnect restricts which executables can be invoked to prevent a local attacker from gaining elevated privileges. One command is interesting as it can be used to invoke executables with elevated privileges. It allows for local processes to connect to it and send commands to it. Vulnerability detailsĬisco An圜onnect comes with a system service listening on the loopback interface. Cisco reports that a similar issue also exists in Cisco An圜onnect Secure Mobility Client for Linux. On OS X it is possible for a local unprivileged user to gain root privileges. It was found that the OS X version of An圜onnect is affected by a similar vulnerability. This could be abused to install an arbitrary interactive service and consequently granting a local user SYSTEM privileges. This vulnerability allowed an unprivileged user to invoke any binary signed by Cisco, which would be executed with SYSTEM privileges.

Last June, a blog post was published by Kostya Kortchinsky detailing an elevation of privileges vulnerability in Cisco An圜onnect Secure Mobility Client for Windows. Ĭisco has released bug ID CSCuv11947 for registered users, which contains additional details and an up-to-date list of affected product versions. FixĬisco customers with active contracts can obtain updates through the Software Center at. This issue was successfully verified on Cisco An圜onnect Secure Mobility Client for OS X version 9.

Security Alert 41135: Cisco An圜onnect Secure Mobility Client for Linux and Mac OS X Privilege Escalation Vulnerability.By exploiting this vulnerability is is possible for the attacker to gain root privileges. Cisco An圜onnect Secure Mobility Client for OS X is affected by a vulnerability that allows local attackers to mount arbitrary DMG files at arbitrary mount points.

Cisco anyconnect secure mobility client is already installed mac