CVE-2015-6306
Cisco AnyConnect Secure Mobility Client 4.1(8) on OS X and Linux does not verify pathnames before installation actions, which allows local users to obtain root privileges via a crafted installation file, aka Bug ID CSCuv11947.
Date published : 2015-09-24
http://www.securityfocus.com/archive/1/536534/100/0/threaded
http://tools.cisco.com/security/center/viewAlert.x?alertId=41135