Unscored severity · published Feb 22, 2007
CVE-2007-1068
The (1) TTLS CHAP, (2) TTLS MSCHAP, (3) TTLS MSCHAPv2, (4) TTLS PAP, (5) MD5, (6) GTC, (7) LEAP, (8) PEAP MSCHAPv2, (9) PEAP GTC, and (10) FAST authentication methods in Cisco…
–
CVSS
0.4%
EPSS
No
On KEV
Description
The (1) TTLS CHAP, (2) TTLS MSCHAP, (3) TTLS MSCHAPv2, (4) TTLS PAP, (5) MD5, (6) GTC, (7) LEAP, (8) PEAP MSCHAPv2, (9) PEAP GTC, and (10) FAST authentication methods in Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client store transmitted authentication credentials in plaintext log files, which allows local users to obtain sensitive information by reading these files, aka CSCsg34423.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 30% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AS
Aegis Secureconnect Client · Meetinghouse
windows_platform · source: NVD
SS
Secure Services Client · Cisco
4.0; 4.0.5; 4.0.51 · source: NVD
SA
Security Agent · Cisco
5.0; 5.1 · source: NVD
TA
Trust Agent · Cisco
1.0; 2.0; 2.0.1; 2.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-1068
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-1068
osvdb.org
http://osvdb.org/33046
Vendor Advisory
http://secunia.com/advisories/24258
Patch
http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml
www.securityfocus.com
http://www.securityfocus.com/bid/22648
www.securitytracker.com
http://www.securitytracker.com/id?1017683
www.securitytracker.com
http://www.securitytracker.com/id?1017684
More from Secure Services Client
–
CVE-2007-1064
Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse…
–
CVE-2007-1065
Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse…
–
CVE-2007-1066
Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse…
–
CVE-2007-1067
Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse…