CVE-2007-1067

Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client do not properly parse commands, which allows local users to gain privileges via unspecified vectors, aka CSCsh30624.

🔗 References (16)

• cve@mitrehttp://osvdb.org/33045
• cve@mitrehttp://secunia.com/advisories/24258
• cve@mitrehttp://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml
• cve@mitrehttp://www.securityfocus.com/bid/22648
• cve@mitrehttp://www.securitytracker.com/id?1017683
• cve@mitrehttp://www.securitytracker.com/id?1017684
• cve@mitrehttp://www.vupen.com/english/advisories/2007/0690
• cve@mitrehttps://exchange.xforce.ibmcloud.com/vulnerabilities/32624
• af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/33045
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/24258
• af854a3a-2127-422b-91ae-364da2661108http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml
• af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/22648
• af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id?1017683
• af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id?1017684
• af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2007/0690