Unscored severity · published Feb 22, 2007
CVE-2007-1064
Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse…
–
CVSS
0.3%
EPSS
No
On KEV
Description
Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client do not drop privileges when the help facility in the supplicant GUI is invoked, which allows local users to gain privileges, aka CSCsf14120.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 23% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AS
Aegis Secureconnect Client · Meetinghouse
windows_platform · source: NVD
SS
Secure Services Client · Cisco
4.0; 4.0.5; 4.0.51 · source: NVD
SA
Security Agent · Cisco
5.0; 5.1 · source: NVD
TA
Trust Agent · Cisco
1.0; 2.0; 2.0.1; 2.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-1064
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-1064
osvdb.org
http://osvdb.org/33049
secunia.com
http://secunia.com/advisories/24258
Patch
http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml
www.securityfocus.com
http://www.securityfocus.com/bid/22648
www.securitytracker.com
http://www.securitytracker.com/id?1017683
www.securitytracker.com
http://www.securitytracker.com/id?1017684
More from Secure Services Client
–
CVE-2007-1065
Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse…
–
CVE-2007-1066
Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse…
–
CVE-2007-1067
Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse…
–
CVE-2007-1068
The (1) TTLS CHAP, (2) TTLS MSCHAP, (3) TTLS MSCHAPv2, (4) TTLS PAP, (5) MD5, (6) GTC, (7) LEAP, (8) PEAP MSCHAPv2, (9) PEAP GTC, and (10) FAST authentication methods in Cisco…