Cisco Secure Desktop (CSD) before 3.1.1.45 allows local users to escape out of the secure desktop environment by using certain applications that switch to the default desktop, aka System Policy Evasion.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Secure_desktop | Cisco | * | 3.1.1.33 (including) |
References
- http://secunia.com/advisories/22747
- http://securitytracker.com/id?1017195
- http://www.cisco.com/warp/public/707/cisco-sa-20061108-csd.shtml
- http://www.osvdb.org/30307
- http://www.securityfocus.com/bid/20964
- http://www.vupen.com/english/advisories/2006/4409
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30130
- http://secunia.com/advisories/22747
- http://securitytracker.com/id?1017195
- http://www.cisco.com/warp/public/707/cisco-sa-20061108-csd.shtml
- http://www.osvdb.org/30307
- http://www.securityfocus.com/bid/20964
- http://www.vupen.com/english/advisories/2006/4409
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30130