PT-2007-2493 · Cisco+1 · Cisco Security Agent+2

Published 2007-02-22 · Updated 2017-07-29 · CVE-2007-1065

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Cisco Secure Services Client (CSSC) versions 4.x Trust Agent versions 1.x through 2.x Cisco Security Agent (CSA) versions 5.0 through 5.1 Meetinghouse AEGIS SecureConnect Client (affected versions not specified)

Description: The issue allows local users to gain SYSTEM privileges via unspecified vectors in the supplicant.

Recommendations: For CSSC version 4.x, update to a version that addresses the issue. For Trust Agent versions 1.x through 2.x, update to a version that addresses the issue. For CSA versions 5.0 through 5.1, update to a version that addresses the issue, ensuring that any vulnerable Trust Agent has been updated. For Meetinghouse AEGIS SecureConnect Client, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2007-1065

Affected Products

Cisco Secure Services Client

Cisco Security Agent

Meetinghouse Aegis Secureconnect Client

References · 9

• http://cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-1065 · Security Note
• http://vupen.com/english/advisories/2007/0690 · Note
• http://securityfocus.com/bid/22648 · Note
• http://securitytracker.com/id?1017684 · Note
• http://secunia.com/advisories/24258 · Note
• http://osvdb.org/33048 · Note
• http://securitytracker.com/id?1017683 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32622 · Note