CVE-2015-6306

Published: Sep 26, 2015Modified: May 6, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

Cisco AnyConnect Secure Mobility Client 4.1(8) on OS X and Linux does not verify pathnames before installation actions, which allows local users to obtain root privileges via a crafted installation file, aka Bug ID CSCuv11947.

Affected (1)

Products: Cisco: Anyconnect Secure Mobility Client

Cisco

1 product

Anyconnect Secure Mobility Client

Configuration A

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Cisco Anyconnect Secure Mobility Client	Version 4.1.(8)

Running on/with	Platform Versions
Apple Mac Os X	All versions
Linux Linux Kernel	All versions

Related CWEs

CWE-264

References (14)

http://packetstormsecurity.com/files/133685/Cisco-AnyConnect-DMG-Install-Script-Privilege-Escalation.html

Source: psirt@cisco.com

ExploitThird Party AdvisoryVDB Entry

http://seclists.org/fulldisclosure/2015/Sep/86

Source: psirt@cisco.com

Third Party AdvisoryVDB Entry

http://tools.cisco.com/security/center/viewAlert.x?alertId=41135

Source: psirt@cisco.com

Vendor Advisory

http://www.securityfocus.com/archive/1/536534/100/0/threaded

Source: psirt@cisco.com

http://www.securitytracker.com/id/1033656

Source: psirt@cisco.com

Third Party AdvisoryVDB Entry

https://www.exploit-db.com/exploits/38303/

Source: psirt@cisco.com

ExploitThird Party AdvisoryVDB Entry

https://www.securify.nl/advisory/SFY20150701/cisco_anyconnect_elevation_%20of_privileges_via_dmg_install_script.html

Source: psirt@cisco.com

PatchThird Party Advisory

http://packetstormsecurity.com/files/133685/Cisco-AnyConnect-DMG-Install-Script-Privilege-Escalation.html