CVE:CVE-2013-1173
CNNVD:CNNVD-201304-191
Cisco AnyConnect Secure Mobility是一个安全的企业移动解决方案。
Cisco AnyConnect Secure Mobility Client（又名AnyConnect VPN Client）中Cisco Security Service中的ciscod.exe中存在基于栈的缓冲区溢出漏洞。本地攻击者可通过未明向量利用该漏洞获取特权。
solution:Upgrade cisco anyconnect_secure_mobility_client to a higher version than -,2.0,2.1,2.2,2.2.128,2.2.133,2.2.136,2.2.140,2.3,2.3.185,2.3.254,2.3.2016,2.4,2.4.0202,2.4.1012,2.4.4004,2.4.4014,2.4.5004,2.4.7030,2.4.7073,2.5,2.5.0217,2.5.1025,2.5.2001,2.5.2006,2.5.2010,2.5.2011,2.5.2014,2.5.2017,2.5.2018,2.5.2019,2.5.3041,2.5.3046,2.5.3051,2.5.3054,2.5.3055,2.5.5112,2.5.5116,2.5.5118,2.5.5125,2.5.5130,2.5.5131,2.5.6005,3.0,3.0.0629,3.0.1047,3.0.2052,3.0.3050,3.0.3054,3.0.4235,3.0.5075,3.0.5080,3.0.07059,3.0.08057,3.0.08066,3.1.0,3.1.00495,3.2.0,and avoid the version 2.0,2.1,2.2,2.2.128,2.2.133,2.2.136,2.2.140,2.3,2.3.185,2.3.254,2.3.2016,2.4,2.4.0202,2.4.1012,2.4.4004,2.4.4014,2.4.5004,2.4.7030,2.4.7073,2.5,2.5.0217,2.5.1025,2.5.2001,2.5.2006,2.5.2010,2.5.2011,2.5.2014,2.5.2017,2.5.2018,2.5.2019,2.5.3041,2.5.3046,2.5.3051,2.5.3054,2.5.3055,2.5.5112,2.5.5116,2.5.5118,2.5.5125,2.5.5130,2.5.5131,2.5.6005,3.0,3.0.0629,3.0.1047,3.0.2052,3.0.3050,3.0.3054,3.0.4235,3.0.5075,3.0.5080,3.0.07059,3.0.08057,3.0.08066,3.1.0,3.1.00495,3.2.0