Description
Cisco Trust Agent (CTA) before 2.1.104.0, when running on MacOS X, allows attackers with physical access to bypass authentication and modify System Preferences, including passwords, by invoking the Apple Menu when the Access Control Server (ACS) produces a user notification message after posture validation.
References
- 35340 vdb-entry
- 20070611 Cisco Trust Agent Vulnerability mailing-list
- 1018217 vdb-entry
- 2796 third-party-advisory
- 20070611 Cisco Trust Agent - Mac OS X Privilege Escalation Vulnerability vendor-advisory
- 25598 third-party-advisory
- 24415 vdb-entry
- cisco-trust-unauthorized-access(34807) vdb-entry
- ADV-2007-2140 vdb-entry