CVE-2007-1064
Published Feb 22, 2007
Last updated 7 years ago
Overview
- Description
- Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client do not drop privileges when the help facility in the supplicant GUI is invoked, which allows local users to gain privileges, aka CSCsf14120.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 6.8
- Impact score
- 10
- Exploitability score
- 3.1
- Vector string
- AV:L/AC:L/Au:S/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:secure_services_client:4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BDEFEA3C-0595-4A62-8ACA-EBC364BFAEBB"
},
{
"criteria": "cpe:2.3:a:cisco:secure_services_client:4.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3802F8EB-A1B9-42ED-B18F-6DDDE66D1DBD"
},
{
"criteria": "cpe:2.3:a:cisco:secure_services_client:4.0.51:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "63567540-B390-41DB-B3C8-C6F5E47914A6"
},
{
"criteria": "cpe:2.3:a:cisco:security_agent:5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E171031D-51C1-41BB-96E4-DFFF0C36B74B"
},
{
"criteria": "cpe:2.3:a:cisco:security_agent:5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F6DD0915-7671-42CD-8DF3-0B685389C528"
},
{
"criteria": "cpe:2.3:a:cisco:trust_agent:1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7AE07274-FF2E-4D38-8E7A-68535BA3B841"
},
{
"criteria": "cpe:2.3:a:cisco:trust_agent:2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A548227E-0736-44B4-AB8B-930D5B7FC5CF"
},
{
"criteria": "cpe:2.3:a:cisco:trust_agent:2.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6AEDB26D-F1DC-4B90-824B-B03EDE92C27A"
},
{
"criteria": "cpe:2.3:a:cisco:trust_agent:2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "957BB8CB-A3E9-4FB0-A60D-864FD14371C4"
},
{
"criteria": "cpe:2.3:a:meetinghouse:aegis_secureconnect_client:windows_platform:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AF7A9BA8-B2C9-417A-86FA-1672EA9886BF"
}
],
"operator": "OR"
}
]
}
]