CVE-2007-1067

Cisco Secure Services Client 4.x - Privilege Escalation via Command Parsing

Title source: llm

Description

Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client do not properly parse commands, which allows local users to gain privileges via unspecified vectors, aka CSCsh30624.

References (8)

Core 8

Core References

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/24258

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/33045

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/32624

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2007/0690

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/22648

Vendor Advisory vendor-advisory x_refsource_cisco

http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1017683

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1017684

Scores

EPSS 0.0033

EPSS Percentile 25.8%

Details

Status published

Products (5)

cisco/secure_services_client 4.x

cisco/security_agent 5.0

cisco/security_agent 5.1

cisco/trust_agent 1

meetinghouse/aegis_secureconnect_client windows_platform

Published Feb 22, 2007

Tracked Since Feb 18, 2026