Security Advisory
CVE-2009-5008
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Cisco Secure Desktop (CSD), when used in conjunction with an AnyConnect SSL VPN server, does not properly perform verification, which allows local users to bypass intended policy restrictions via a modified executable file.