{"api_version":"1","generated_at":"2026-07-23T18:57:15+00:00","cve":"CVE-2007-0960","urls":{"html":"https://cve.report/CVE-2007-0960","api":"https://cve.report/api/cve/CVE-2007-0960.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2007-0960","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-0960"},"summary":{"title":"CVE-2007-0960","description":"Unspecified vulnerability in Cisco PIX 500 and ASA 5500 Series Security Appliances 7.2.2, when configured to use the LOCAL authentication method, allows remote authenticated users to gain privileges via unspecified vectors.","state":"PUBLISHED","assigner":"mitre","published_at":"2007-02-16 00:28:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"9","severity":"","vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","baseScore":9,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2484.shtml","name":"http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2484.shtml","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Cisco Security Advisory: Multiple Vulnerabilities in Cisco PIX and ASA Appliances  [Products & Services] - Cisco Systems","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securitytracker.com/id?1017652","name":"http://www.securitytracker.com/id?1017652","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityTracker.com Archives - Cisco PIX Firewall Lets Remote Users Deny Service and Remote Authenticated Users Gain Elevated Privileges","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/22562","name":"http://www.securityfocus.com/bid/22562","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Cisco PIX/ASA Privilege Escalation Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.securityfocus.com/bid/22561","name":"http://www.securityfocus.com/bid/22561","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Cisco Multiple Products Multiple Remote Denial Of Service Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32489","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32489","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://osvdb.org/33063","name":"http://osvdb.org/33063","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://secunia.com/advisories/24160","name":"http://secunia.com/advisories/24160","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Cisco PIX and ASA Privilege Escalation and Denial of Service - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securitytracker.com/id?1017651","name":"http://www.securitytracker.com/id?1017651","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"SecurityTracker.com Archives - Cisco ASA Lets Remote Users Deny Service and Remote Authenticated Users Gain Elevated Privileges","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/24179","name":"http://secunia.com/advisories/24179","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Cisco PIX SIP Inspection Denial of Service - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2007/0608","name":"http://www.vupen.com/english/advisories/2007/0608","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-0960","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-0960","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2007","cve_id":"960","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"cisco","cpe5":"asa_5500","cpe6":"7.2\\(2\\)","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"960","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"pix_firewall_software","cpe6":"7.2\\(2\\)","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T12:34:21.390Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"ADV-2007-0608","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2007/0608"},{"name":"1017651","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1017651"},{"name":"20070214 Multiple Vulnerabilities in Cisco PIX and ASA Appliances","tags":["vendor-advisory","x_refsource_CISCO","x_transferred"],"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2484.shtml"},{"name":"24179","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/24179"},{"name":"22561","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/22561"},{"name":"33063","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/33063"},{"name":"22562","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/22562"},{"name":"24160","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/24160"},{"name":"1017652","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1017652"},{"name":"cisco-pix-asa-local-privilege-escalation(32489)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32489"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2007-02-14T00:00:00.000Z","descriptions":[{"lang":"en","value":"Unspecified vulnerability in Cisco PIX 500 and ASA 5500 Series Security Appliances 7.2.2, when configured to use the LOCAL authentication method, allows remote authenticated users to gain privileges via unspecified vectors."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-07-28T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"ADV-2007-0608","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2007/0608"},{"name":"1017651","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1017651"},{"name":"20070214 Multiple Vulnerabilities in Cisco PIX and ASA Appliances","tags":["vendor-advisory","x_refsource_CISCO"],"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2484.shtml"},{"name":"24179","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/24179"},{"name":"22561","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/22561"},{"name":"33063","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/33063"},{"name":"22562","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/22562"},{"name":"24160","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/24160"},{"name":"1017652","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1017652"},{"name":"cisco-pix-asa-local-privilege-escalation(32489)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32489"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2007-0960","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Unspecified vulnerability in Cisco PIX 500 and ASA 5500 Series Security Appliances 7.2.2, when configured to use the LOCAL authentication method, allows remote authenticated users to gain privileges via unspecified vectors."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"ADV-2007-0608","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2007/0608"},{"name":"1017651","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1017651"},{"name":"20070214 Multiple Vulnerabilities in Cisco PIX and ASA Appliances","refsource":"CISCO","url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2484.shtml"},{"name":"24179","refsource":"SECUNIA","url":"http://secunia.com/advisories/24179"},{"name":"22561","refsource":"BID","url":"http://www.securityfocus.com/bid/22561"},{"name":"33063","refsource":"OSVDB","url":"http://osvdb.org/33063"},{"name":"22562","refsource":"BID","url":"http://www.securityfocus.com/bid/22562"},{"name":"24160","refsource":"SECUNIA","url":"http://secunia.com/advisories/24160"},{"name":"1017652","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1017652"},{"name":"cisco-pix-asa-local-privilege-escalation(32489)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32489"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2007-0960","datePublished":"2007-02-16T00:00:00.000Z","dateReserved":"2007-02-15T00:00:00.000Z","dateUpdated":"2024-08-07T12:34:21.390Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2007-02-16 00:28:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","baseScore":9,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:asa_5500:7.2\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"EFDDB4A3-FB2C-48B2-9735-307D82084BAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:7.2\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"02588BF1-A105-4354-B229-B130840074A9"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2007","CveId":"960","Ordinal":"1","Title":"CVE-2007-0960","CVE":"CVE-2007-0960","Year":"2007"},"notes":[{"CveYear":"2007","CveId":"960","Ordinal":"1","NoteData":"Unspecified vulnerability in Cisco PIX 500 and ASA 5500 Series Security Appliances 7.2.2, when configured to use the LOCAL authentication method, allows remote authenticated users to gain privileges via unspecified vectors.","Type":"Description","Title":"CVE-2007-0960"},{"CveYear":"2007","CveId":"960","Ordinal":"2","NoteData":"2007-02-15","Type":"Other","Title":"Published"},{"CveYear":"2007","CveId":"960","Ordinal":"3","NoteData":"2017-07-28","Type":"Other","Title":"Modified"}]}}}