CVE-2007-1065
Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client allows local users to gain SYSTEM privileges via unspecified vectors in the supplicant, aka CSCsf15836.
| Software | From | Fixed in |
|---|---|---|
| cisco / trust_agent | 2.0 | 2.0.x |
| cisco / security_agent | 5.1 | 5.1.x |
| cisco / security_agent | 5.0 | 5.0.x |
| cisco / secure_services_client | 4.0.51 | 4.0.51.x |
| cisco / secure_services_client | 4.0 | 4.0.x |
| cisco / trust_agent | 2.0.1 | 2.0.1.x |
| meetinghouse / aegis_secureconnect_client | windows_platform | windows_platform.x |
| cisco / trust_agent | 2.1 | 2.1.x |
| cisco / trust_agent | 1.0 | 1.0.x |
| cisco / secure_services_client | 4.0.5 | 4.0.5.x |
- http://osvdb.org/33048
- http://secunia.com/advisories/24258
- http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml
- http://www.securityfocus.com/bid/22648
- http://www.securitytracker.com/id?1017683
- http://www.securitytracker.com/id?1017684
- http://www.vupen.com/english/advisories/2007/0690
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32622
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime