« Volver al listado

CVE-2007-1064

Estado: ModificadaMedia (6.8)—

Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client do not drop privileges when the help facility in the supplicant GUI is invoked, which allows local users to gain privileges, aka CSCsf14120.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (4)

Cisco — Secure Services ClientCisco — Security AgentCisco — Trust AgentMeetinghouse — Aegis Secureconnect Client

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-1064",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.8,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:S/C:C/I:C/A:C",
          "authentication": "SINGLE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": true,
        "exploitabilityScore": 3.1,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-02-22T01:28:00.000",
  "references": [
    {
      "url": "http://osvdb.org/33049",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/24258",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/22648",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securitytracker.com/id?1017683",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securitytracker.com/id?1017684",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/0690",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32621",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/33049",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/24258",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/22648",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1017683",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1017684",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/0690",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32621",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client do not drop privileges when the help facility in the supplicant GUI is invoked, which allows local users to gain privileges, aka CSCsf14120."
    },
    {
      "lang": "es",
      "value": "Cisco Secure Services Client (CSSC) versiones 4.x, Trust Agent 1.x y 2.x, Cisco Security Agent (CSA) versiones 5.0 y 5.1 (cuando ha sido desplegado un Trust Agent vulnerable) y el Meetinghouse AEGIS SecureConnect Client, no pierde los privilegios cuando es invocado el servicio de ayuda en la GUI del requirente, lo que permite a usuarios locales alcanzar privilegios, también se conoce como CSCsf14120."
    }
  ],
  "lastModified": "2026-06-16T22:36:51.423",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:secure_services_client:4.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BDEFEA3C-0595-4A62-8ACA-EBC364BFAEBB"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_services_client:4.0.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3802F8EB-A1B9-42ED-B18F-6DDDE66D1DBD"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_services_client:4.0.51:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "63567540-B390-41DB-B3C8-C6F5E47914A6"
            },
            {
              "criteria": "cpe:2.3:a:cisco:security_agent:5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E171031D-51C1-41BB-96E4-DFFF0C36B74B"
            },
            {
              "criteria": "cpe:2.3:a:cisco:security_agent:5.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F6DD0915-7671-42CD-8DF3-0B685389C528"
            },
            {
              "criteria": "cpe:2.3:a:cisco:trust_agent:1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7AE07274-FF2E-4D38-8E7A-68535BA3B841"
            },
            {
              "criteria": "cpe:2.3:a:cisco:trust_agent:2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A548227E-0736-44B4-AB8B-930D5B7FC5CF"
            },
            {
              "criteria": "cpe:2.3:a:cisco:trust_agent:2.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6AEDB26D-F1DC-4B90-824B-B03EDE92C27A"
            },
            {
              "criteria": "cpe:2.3:a:cisco:trust_agent:2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "957BB8CB-A3E9-4FB0-A60D-864FD14371C4"
            },
            {
              "criteria": "cpe:2.3:a:meetinghouse:aegis_secureconnect_client:windows_platform:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AF7A9BA8-B2C9-417A-86FA-1672EA9886BF"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}