Description
Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client do not properly parse commands, which allows local users to gain privileges via unspecified vectors, aka CSCsh30624.
References
- 24258 third-party-advisory
- 33045 vdb-entry
- cisco-cssc-parsing-privilege-escalation(32624) vdb-entry
- ADV-2007-0690 vdb-entry
- 22648 vdb-entry
- 20070221 Multiple Vulnerabilities in 802.1X Supplicant vendor-advisory
- 1017683 vdb-entry
- 1017684 vdb-entry