{"api_version":"1","generated_at":"2026-07-23T05:46:48+00:00","cve":"CVE-2007-1064","urls":{"html":"https://cve.report/CVE-2007-1064","api":"https://cve.report/api/cve/CVE-2007-1064.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2007-1064","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-1064"},"summary":{"title":"CVE-2007-1064","description":"Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client do not drop privileges when the help facility in the supplicant GUI is invoked, which allows local users to gain privileges, aka CSCsf14120.","state":"PUBLISHED","assigner":"mitre","published_at":"2007-02-22 01:28:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.8","severity":"","vector":"AV:L/AC:L/Au:S/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:C/I:C/A:C","baseScore":6.8,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://www.securitytracker.com/id?1017683","name":"http://www.securitytracker.com/id?1017683","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityTracker: Cisco Secure Services Client Lets Local Users Gain System Privileges and Also View Passwords","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2007/0690","name":"http://www.vupen.com/english/advisories/2007/0690","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/24258","name":"http://secunia.com/advisories/24258","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Cisco Secure Services Client Multiple Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32621","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32621","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/22648","name":"http://www.securityfocus.com/bid/22648","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Cisco 802.1X Authentication Deployment Products Multiple Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.securitytracker.com/id?1017684","name":"http://www.securitytracker.com/id?1017684","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityTracker: Cisco Trust Agent Lets Local Users Gain System Privileges and Also View Passwords","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml","name":"http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Cisco - Networking, Cloud, and Cybersecurity Solutions","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://osvdb.org/33049","name":"http://osvdb.org/33049","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-1064","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-1064","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2007","cve_id":"1064","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_services_client","cpe6":"4.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"1064","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_services_client","cpe6":"4.0.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"1064","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_services_client","cpe6":"4.0.51","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"1064","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"security_agent","cpe6":"5.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"1064","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"security_agent","cpe6":"5.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"1064","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"trust_agent","cpe6":"1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"1064","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"trust_agent","cpe6":"2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"1064","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"trust_agent","cpe6":"2.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"1064","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"trust_agent","cpe6":"2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"1064","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"meetinghouse","cpe5":"aegis_secureconnect_client","cpe6":"windows_platform","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T12:43:22.549Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"24258","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/24258"},{"name":"ADV-2007-0690","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2007/0690"},{"name":"22648","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/22648"},{"name":"33049","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/33049"},{"name":"20070221 Multiple Vulnerabilities in 802.1X Supplicant","tags":["vendor-advisory","x_refsource_CISCO","x_transferred"],"url":"http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml"},{"name":"1017683","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1017683"},{"name":"cisco-cssc-help-privilege-escalation(32621)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32621"},{"name":"1017684","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1017684"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2007-02-21T00:00:00.000Z","descriptions":[{"lang":"en","value":"Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client do not drop privileges when the help facility in the supplicant GUI is invoked, which allows local users to gain privileges, aka CSCsf14120."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-07-28T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"24258","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/24258"},{"name":"ADV-2007-0690","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2007/0690"},{"name":"22648","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/22648"},{"name":"33049","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/33049"},{"name":"20070221 Multiple Vulnerabilities in 802.1X Supplicant","tags":["vendor-advisory","x_refsource_CISCO"],"url":"http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml"},{"name":"1017683","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1017683"},{"name":"cisco-cssc-help-privilege-escalation(32621)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32621"},{"name":"1017684","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1017684"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2007-1064","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client do not drop privileges when the help facility in the supplicant GUI is invoked, which allows local users to gain privileges, aka CSCsf14120."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"24258","refsource":"SECUNIA","url":"http://secunia.com/advisories/24258"},{"name":"ADV-2007-0690","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2007/0690"},{"name":"22648","refsource":"BID","url":"http://www.securityfocus.com/bid/22648"},{"name":"33049","refsource":"OSVDB","url":"http://osvdb.org/33049"},{"name":"20070221 Multiple Vulnerabilities in 802.1X Supplicant","refsource":"CISCO","url":"http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml"},{"name":"1017683","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1017683"},{"name":"cisco-cssc-help-privilege-escalation(32621)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32621"},{"name":"1017684","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1017684"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2007-1064","datePublished":"2007-02-22T01:00:00.000Z","dateReserved":"2007-02-21T00:00:00.000Z","dateUpdated":"2024-08-07T12:43:22.549Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2007-02-22 01:28:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:C/I:C/A:C","baseScore":6.8,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.1,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_services_client:4.0:*:*:*:*:*:*:*","matchCriteriaId":"BDEFEA3C-0595-4A62-8ACA-EBC364BFAEBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_services_client:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3802F8EB-A1B9-42ED-B18F-6DDDE66D1DBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_services_client:4.0.51:*:*:*:*:*:*:*","matchCriteriaId":"63567540-B390-41DB-B3C8-C6F5E47914A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:security_agent:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E171031D-51C1-41BB-96E4-DFFF0C36B74B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:security_agent:5.1:*:*:*:*:*:*:*","matchCriteriaId":"F6DD0915-7671-42CD-8DF3-0B685389C528"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:trust_agent:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7AE07274-FF2E-4D38-8E7A-68535BA3B841"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:trust_agent:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A548227E-0736-44B4-AB8B-930D5B7FC5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:trust_agent:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6AEDB26D-F1DC-4B90-824B-B03EDE92C27A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:trust_agent:2.1:*:*:*:*:*:*:*","matchCriteriaId":"957BB8CB-A3E9-4FB0-A60D-864FD14371C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:meetinghouse:aegis_secureconnect_client:windows_platform:*:*:*:*:*:*:*","matchCriteriaId":"AF7A9BA8-B2C9-417A-86FA-1672EA9886BF"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2007","CveId":"1064","Ordinal":"1","Title":"CVE-2007-1064","CVE":"CVE-2007-1064","Year":"2007"},"notes":[{"CveYear":"2007","CveId":"1064","Ordinal":"1","NoteData":"Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client do not drop privileges when the help facility in the supplicant GUI is invoked, which allows local users to gain privileges, aka CSCsf14120.","Type":"Description","Title":"CVE-2007-1064"},{"CveYear":"2007","CveId":"1064","Ordinal":"2","NoteData":"2007-02-21","Type":"Other","Title":"Published"},{"CveYear":"2007","CveId":"1064","Ordinal":"3","NoteData":"2017-07-28","Type":"Other","Title":"Modified"}]}}}