|
|
CVE Reference: CVE-2007-1064 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2007-1064 |
|
|
Description: Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client do not drop privileges when the help facility in the supplicant GUI is invoked, which allows local users to gain privileges, aka CSCsf14120. |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/32621 ST 1017683 1017684 SAID Secunia Advisory: SA24258 OSVDB 33049 CISCO http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml BID 22648 |
|
| Return to the previous page. |
