VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 22, 2007· Updated Apr 23, 2026

CVE-2007-1064

CVE-2007-1064

Description

Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client do not drop privileges when the help facility in the supplicant GUI is invoked, which allows local users to gain privileges, aka CSCsf14120.

Affected products

10
  • Cisco Systems, Inc./Secure Services Client3 versions
    cpe:2.3:a:cisco:secure_services_client:4.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:cisco:secure_services_client:4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_services_client:4.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_services_client:4.0.51:*:*:*:*:*:*:*
  • Cisco Systems, Inc./Security Agent2 versions
    cpe:2.3:a:cisco:security_agent:5.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:cisco:security_agent:5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:security_agent:5.1:*:*:*:*:*:*:*
  • Cisco Systems, Inc./Trust Agent4 versions
    cpe:2.3:a:cisco:trust_agent:1.0:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:cisco:trust_agent:1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:trust_agent:2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:trust_agent:2.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:trust_agent:2.1:*:*:*:*:*:*:*
  • Meetinghouse/Aegis Secureconnect Client
    cpe:2.3:a:meetinghouse:aegis_secureconnect_client:windows_platform:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

8

News mentions

0

No linked articles in our index yet.