VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 22, 2007· Updated Jun 16, 2026

CVE-2007-1066

CVE-2007-1066

Description

Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client use an insecure default Discretionary Access Control Lists (DACL) for the connection client GUI, which allows local users to gain privileges by injecting "a thread under ConnectionClient.exe," aka CSCsg20558.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

13
  • Cisco Systems, Inc./Secure Services Client4 versions
    cpe:2.3:a:cisco:secure_services_client:4.0:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:cisco:secure_services_client:4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_services_client:4.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_services_client:4.0.51:*:*:*:*:*:*:*
    • (no CPE)range: 4.x
  • Cisco Systems, Inc./Security Agent2 versions
    cpe:2.3:a:cisco:security_agent:5.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:cisco:security_agent:5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:security_agent:5.1:*:*:*:*:*:*:*
  • Cisco Systems, Inc./Trust Agent5 versions
    cpe:2.3:a:cisco:trust_agent:1.0:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:cisco:trust_agent:1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:trust_agent:2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:trust_agent:2.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:trust_agent:2.1:*:*:*:*:*:*:*
    • (no CPE)range: 1.x, 2.x
  • Meetinghouse/Aegis Secureconnect Client2 versions
    cpe:2.3:a:meetinghouse:aegis_secureconnect_client:windows_platform:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:meetinghouse:aegis_secureconnect_client:windows_platform:*:*:*:*:*:*:*
    • (no CPE)

Patches

Vulnerability mechanics

References

8

News mentions

0

No linked articles in our index yet.

CVE-2007-1066 · VYPR