Lucene search

MitreCVE-2007-1067

HistoryFeb 22, 2007 - 1:28 a.m.

CVE-2007-1067

2007-02-2201:28:00

mitre

web.nvd.nist.gov

cisco

trust agent

cssc

csa

command parsing

vulnerability

cve-2007-1067

cscsh30624

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.6

Confidence

Low

EPSS

0.001

Percentile

26.1%

JSON

Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client do not properly parse commands, which allows local users to gain privileges via unspecified vectors, aka CSCsh30624.

Affected configurations

Nvd

Node

ciscosecure_services_clientMatch4.x

ciscosecurity_agentMatch5.0

ciscosecurity_agentMatch5.1

ciscotrust_agentMatch1

meetinghouseaegis_secureconnect_clientMatchwindows_platform

VendorProductVersionCPE
ciscosecure_services_client4.xcpe:2.3:a:cisco:secure_services_client:4.x:*:*:*:*:*:*:*
ciscosecurity_agent5.0cpe:2.3:a:cisco:security_agent:5.0:*:*:*:*:*:*:*
ciscosecurity_agent5.1cpe:2.3:a:cisco:security_agent:5.1:*:*:*:*:*:*:*
ciscotrust_agent1cpe:2.3:a:cisco:trust_agent:1:*:*:*:*:*:*:*
meetinghouseaegis_secureconnect_clientwindows_platformcpe:2.3:a:meetinghouse:aegis_secureconnect_client:windows_platform:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	secure_services_client	4.x	cpe:2.3:a:cisco:secure_services_client:4.x:::::::*
cisco	security_agent	5.0	cpe:2.3:a:cisco:security_agent:5.0:::::::*
cisco	security_agent	5.1	cpe:2.3:a:cisco:security_agent:5.1:::::::*
cisco	trust_agent	1	cpe:2.3:a:cisco:trust_agent:1:::::::*
meetinghouse	aegis_secureconnect_client	windows_platform	cpe:2.3:a:meetinghouse:aegis_secureconnect_client:windows_platform:::::::*

References

osvdb.org/33045

secunia.com/advisories/24258

www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml

www.securityfocus.com/bid/22648

www.securitytracker.com/id?1017683

www.securitytracker.com/id?1017684

www.vupen.com/english/advisories/2007/0690

exchange.xforce.ibmcloud.com/vulnerabilities/32624

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.6

Confidence

Low

EPSS

0.001

Percentile

26.1%

JSON

Related for CVE-2007-1067