Lucene search
HistoryFeb 22, 2007 - 1:28 a.m.
CVE-2007-1065
CVSS2
6.8
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:S/C:C/I:C/A:C
AI Score
6.4
Confidence
Low
EPSS
0.001
Percentile
26.1%
Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client allows local users to gain SYSTEM privileges via unspecified vectors in the supplicant, aka CSCsf15836.
Affected configurations
Node
ciscosecure_services_clientMatch4.0
ORciscosecure_services_clientMatch4.0.5
ORciscosecure_services_clientMatch4.0.51
ORciscosecurity_agentMatch5.0
ORciscosecurity_agentMatch5.1
ORciscotrust_agentMatch1.0
ORciscotrust_agentMatch2.0
ORciscotrust_agentMatch2.0.1
ORciscotrust_agentMatch2.1
ORmeetinghouseaegis_secureconnect_clientMatchwindows_platform
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | secure_services_client | 4.0 | cpe:2.3:a:cisco:secure_services_client:4.0:*:*:*:*:*:*:* |
| cisco | secure_services_client | 4.0.5 | cpe:2.3:a:cisco:secure_services_client:4.0.5:*:*:*:*:*:*:* |
| cisco | secure_services_client | 4.0.51 | cpe:2.3:a:cisco:secure_services_client:4.0.51:*:*:*:*:*:*:* |
| cisco | security_agent | 5.0 | cpe:2.3:a:cisco:security_agent:5.0:*:*:*:*:*:*:* |
| cisco | security_agent | 5.1 | cpe:2.3:a:cisco:security_agent:5.1:*:*:*:*:*:*:* |
| cisco | trust_agent | 1.0 | cpe:2.3:a:cisco:trust_agent:1.0:*:*:*:*:*:*:* |
| cisco | trust_agent | 2.0 | cpe:2.3:a:cisco:trust_agent:2.0:*:*:*:*:*:*:* |
| cisco | trust_agent | 2.0.1 | cpe:2.3:a:cisco:trust_agent:2.0.1:*:*:*:*:*:*:* |
| cisco | trust_agent | 2.1 | cpe:2.3:a:cisco:trust_agent:2.1:*:*:*:*:*:*:* |
| meetinghouse | aegis_secureconnect_client | windows_platform | cpe:2.3:a:meetinghouse:aegis_secureconnect_client:windows_platform:*:*:*:*:*:*:* |
References
Related
prion
prion
Code injection
2007-02-22 01:28:00
cvelist
cvelist
CVE-2007-1065
2007-02-22 01:00:00
cve
cve
CVE-2007-1065
2007-02-22 01:28:00
cisco
cisco
Multiple Vulnerabilities in 802.1X Supplicant
2007-02-21 16:00:00
securityvulns
securityvulns
Cisco 802.1X Supplicant multiple security vulnerabilities
2007-02-21 00:00:00
CVSS2
6.8
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:S/C:C/I:C/A:C
AI Score
6.4
Confidence
Low
EPSS
0.001
Percentile
26.1%
Related for NVD:CVE-2007-1065