{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-02-21T05:00:00.000Z", "descriptions": [{"lang": "en", "value": "Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client do not drop privileges when the help facility in the supplicant GUI is invoked, which allows local users to gain privileges, aka CSCsf14120."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-28T16:57:01.000Z", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "24258", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/24258"}, {"name": "ADV-2007-0690", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2007/0690"}, {"name": "22648", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/22648"}, {"name": "33049", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/33049"}, {"name": "20070221 Multiple Vulnerabilities in 802.1X Supplicant", "tags": ["vendor-advisory", "x_refsource_CISCO"], "url": "http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml"}, {"name": "1017683", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1017683"}, {"name": "cisco-cssc-help-privilege-escalation(32621)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32621"}, {"name": "1017684", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1017684"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-1064", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client do not drop privileges when the help facility in the supplicant GUI is invoked, which allows local users to gain privileges, aka CSCsf14120."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "24258", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/24258"}, {"name": "ADV-2007-0690", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2007/0690"}, {"name": "22648", "refsource": "BID", "url": "http://www.securityfocus.com/bid/22648"}, {"name": "33049", "refsource": "OSVDB", "url": "http://osvdb.org/33049"}, {"name": "20070221 Multiple Vulnerabilities in 802.1X Supplicant", "refsource": "CISCO", "url": "http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml"}, {"name": "1017683", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1017683"}, {"name": "cisco-cssc-help-privilege-escalation(32621)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32621"}, {"name": "1017684", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1017684"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T12:43:22.549Z"}, "title": "CVE Program Container", "references": [{"name": "24258", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/24258"}, {"name": "ADV-2007-0690", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2007/0690"}, {"name": "22648", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/22648"}, {"name": "33049", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/33049"}, {"name": "20070221 Multiple Vulnerabilities in 802.1X Supplicant", "tags": ["vendor-advisory", "x_refsource_CISCO", "x_transferred"], "url": "http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml"}, {"name": "1017683", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id?1017683"}, {"name": "cisco-cssc-help-privilege-escalation(32621)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32621"}, {"name": "1017684", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id?1017684"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-1064", "datePublished": "2007-02-22T06:00:00.000Z", "dateReserved": "2007-02-21T05:00:00.000Z", "dateUpdated": "2024-08-07T12:43:22.549Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cisco:secure_services_client:4.0:*:*:*:*:*:*:*", "matchCriteriaId": "BDEFEA3C-0595-4A62-8ACA-EBC364BFAEBB", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_services_client:4.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "3802F8EB-A1B9-42ED-B18F-6DDDE66D1DBD", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_services_client:4.0.51:*:*:*:*:*:*:*", "matchCriteriaId": "63567540-B390-41DB-B3C8-C6F5E47914A6", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:security_agent:5.0:*:*:*:*:*:*:*", "matchCriteriaId": "E171031D-51C1-41BB-96E4-DFFF0C36B74B", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:security_agent:5.1:*:*:*:*:*:*:*", "matchCriteriaId": "F6DD0915-7671-42CD-8DF3-0B685389C528", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:trust_agent:1.0:*:*:*:*:*:*:*", "matchCriteriaId": "7AE07274-FF2E-4D38-8E7A-68535BA3B841", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:trust_agent:2.0:*:*:*:*:*:*:*", "matchCriteriaId": "A548227E-0736-44B4-AB8B-930D5B7FC5CF", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:trust_agent:2.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "6AEDB26D-F1DC-4B90-824B-B03EDE92C27A", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:trust_agent:2.1:*:*:*:*:*:*:*", "matchCriteriaId": "957BB8CB-A3E9-4FB0-A60D-864FD14371C4", "vulnerable": true}, {"criteria": "cpe:2.3:a:meetinghouse:aegis_secureconnect_client:windows_platform:*:*:*:*:*:*:*", "matchCriteriaId": "AF7A9BA8-B2C9-417A-86FA-1672EA9886BF", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client do not drop privileges when the help facility in the supplicant GUI is invoked, which allows local users to gain privileges, aka CSCsf14120."}, {"lang": "es", "value": "Cisco Secure Services Client (CSSC) versiones 4.x, Trust Agent 1.x y 2.x, Cisco Security Agent (CSA) versiones 5.0 y 5.1 (cuando ha sido desplegado un Trust Agent vulnerable) y el Meetinghouse AEGIS SecureConnect Client, no pierde los privilegios cuando es invocado el servicio de ayuda en la GUI del requirente, lo que permite a usuarios locales alcanzar privilegios, tambi\u00e9n se conoce como CSCsf14120."}], "id": "CVE-2007-1064", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "SINGLE", "availabilityImpact": "COMPLETE", "baseScore": 6.8, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:L/Au:S/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 3.1, "impactScore": 10.0, "obtainAllPrivilege": true, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-02-22T01:28:00.000", "references": [{"source": "cve@mitre.org", "url": "http://osvdb.org/33049"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/24258"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/22648"}, {"source": "cve@mitre.org", "url": "http://www.securitytracker.com/id?1017683"}, {"source": "cve@mitre.org", "url": "http://www.securitytracker.com/id?1017684"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2007/0690"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32621"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/33049"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/24258"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/22648"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securitytracker.com/id?1017683"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securitytracker.com/id?1017684"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2007/0690"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32621"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}