6.8

CVE-2007-1065

Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client allows local users to gain SYSTEM privileges via unspecified vectors in the supplicant, aka CSCsf15836.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Secure Services Client Version 4.0
Cisco ≫ Secure Services Client Version 4.0.5
Cisco ≫ Secure Services Client Version 4.0.51
Cisco ≫ Security Agent Version 5.0
Cisco ≫ Security Agent Version 5.1
Cisco ≫ Trust Agent Version 1.0
Cisco ≫ Trust Agent Version 2.0
Cisco ≫ Trust Agent Version 2.0.1
Cisco ≫ Trust Agent Version 2.1
Meetinghouse ≫ Aegis Secureconnect Client Version windows_platform
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.3% 0.212
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.8 3.1 10
AV:L/AC:L/Au:S/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/24258
http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml
Patch
Vendor Advisory
http://www.securityfocus.com/bid/22648
http://www.securitytracker.com/id?1017683
http://www.securitytracker.com/id?1017684
http://www.vupen.com/english/advisories/2007/0690
http://osvdb.org/33048
https://exchange.xforce.ibmcloud.com/vulnerabilities/32622