Lucene search

[email protected]CVE-2007-1064

HistoryFeb 22, 2007 - 1:28 a.m.

CVE-2007-1064

2007-02-2201:28:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cisco

secure services client

trust agent

security agent

vulnerability

privilege escalation

cscsf14120

nvd

6.7 Medium

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.3%

JSON

Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client do not drop privileges when the help facility in the supplicant GUI is invoked, which allows local users to gain privileges, aka CSCsf14120.

CPENameOperatorVersion
cisco:trust_agentcisco trust agenteq2.0
cisco:security_agentcisco security agenteq5.1
cisco:security_agentcisco security agenteq5.0
cisco:secure_services_clientcisco secure services clienteq4.0.51
cisco:secure_services_clientcisco secure services clienteq4.0
cisco:trust_agentcisco trust agenteq2.0.1
meetinghouse:aegis_secureconnect_clientmeetinghouse aegis secureconnect clienteqwindows_platform
cisco:trust_agentcisco trust agenteq2.1
cisco:trust_agentcisco trust agenteq1.0
cisco:secure_services_clientcisco secure services clienteq4.0.5

CPE	Name	Operator	Version
cisco:trust_agent	cisco trust agent	eq	2.0
cisco:security_agent	cisco security agent	eq	5.1
cisco:security_agent	cisco security agent	eq	5.0
cisco:secure_services_client	cisco secure services client	eq	4.0.51
cisco:secure_services_client	cisco secure services client	eq	4.0
cisco:trust_agent	cisco trust agent	eq	2.0.1
meetinghouse:aegis_secureconnect_client	meetinghouse aegis secureconnect client	eq	windows_platform
cisco:trust_agent	cisco trust agent	eq	2.1
cisco:trust_agent	cisco trust agent	eq	1.0
cisco:secure_services_client	cisco secure services client	eq	4.0.5

References

osvdb.org/33049

secunia.com/advisories/24258

www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml

www.securityfocus.com/bid/22648

www.securitytracker.com/id?1017683

www.securitytracker.com/id?1017684

www.vupen.com/english/advisories/2007/0690

exchange.xforce.ibmcloud.com/vulnerabilities/32621

6.7 Medium

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.3%

JSON

Related for CVE-2007-1064

prion1 cisco1 securityvulns1