{"api_version":"1","generated_at":"2026-07-23T08:48:47+00:00","cve":"CVE-2007-1066","urls":{"html":"https://cve.report/CVE-2007-1066","api":"https://cve.report/api/cve/CVE-2007-1066.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2007-1066","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-1066"},"summary":{"title":"CVE-2007-1066","description":"Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client use an insecure default Discretionary Access Control Lists (DACL) for the connection client GUI, which allows local users to gain privileges by injecting \"a thread under ConnectionClient.exe,\" aka CSCsg20558.","state":"PUBLISHED","assigner":"mitre","published_at":"2007-02-22 01:28:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.8","severity":"","vector":"AV:L/AC:L/Au:S/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:C/I:C/A:C","baseScore":6.8,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://www.securitytracker.com/id?1017683","name":"http://www.securitytracker.com/id?1017683","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityTracker: Cisco Secure Services Client Lets Local Users Gain System Privileges and Also View Passwords","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2007/0690","name":"http://www.vupen.com/english/advisories/2007/0690","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/24258","name":"http://secunia.com/advisories/24258","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Cisco Secure Services Client Multiple Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://osvdb.org/33047","name":"http://osvdb.org/33047","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32625","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32625","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/22648","name":"http://www.securityfocus.com/bid/22648","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Cisco 802.1X Authentication Deployment Products Multiple Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.securitytracker.com/id?1017684","name":"http://www.securitytracker.com/id?1017684","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityTracker: Cisco Trust Agent Lets Local Users Gain System Privileges and Also View Passwords","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml","name":"http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Cisco - Networking, Cloud, and Cybersecurity Solutions","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-1066","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-1066","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2007","cve_id":"1066","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_services_client","cpe6":"4.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"1066","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_services_client","cpe6":"4.0.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"1066","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_services_client","cpe6":"4.0.51","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"1066","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"security_agent","cpe6":"5.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"1066","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"security_agent","cpe6":"5.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"1066","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"trust_agent","cpe6":"1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"1066","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"trust_agent","cpe6":"2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"1066","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"trust_agent","cpe6":"2.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"1066","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"trust_agent","cpe6":"2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"1066","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"meetinghouse","cpe5":"aegis_secureconnect_client","cpe6":"windows_platform","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T12:43:22.501Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"24258","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/24258"},{"name":"ADV-2007-0690","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2007/0690"},{"name":"22648","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/22648"},{"name":"20070221 Multiple Vulnerabilities in 802.1X Supplicant","tags":["vendor-advisory","x_refsource_CISCO","x_transferred"],"url":"http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml"},{"name":"1017683","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1017683"},{"name":"cisco-cssc-dacl-privilege-escalation(32625)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32625"},{"name":"33047","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/33047"},{"name":"1017684","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1017684"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2007-02-21T00:00:00.000Z","descriptions":[{"lang":"en","value":"Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client use an insecure default Discretionary Access Control Lists (DACL) for the connection client GUI, which allows local users to gain privileges by injecting \"a thread under ConnectionClient.exe,\" aka CSCsg20558."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-07-28T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"24258","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/24258"},{"name":"ADV-2007-0690","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2007/0690"},{"name":"22648","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/22648"},{"name":"20070221 Multiple Vulnerabilities in 802.1X Supplicant","tags":["vendor-advisory","x_refsource_CISCO"],"url":"http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml"},{"name":"1017683","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1017683"},{"name":"cisco-cssc-dacl-privilege-escalation(32625)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32625"},{"name":"33047","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/33047"},{"name":"1017684","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1017684"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2007-1066","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client use an insecure default Discretionary Access Control Lists (DACL) for the connection client GUI, which allows local users to gain privileges by injecting \"a thread under ConnectionClient.exe,\" aka CSCsg20558."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"24258","refsource":"SECUNIA","url":"http://secunia.com/advisories/24258"},{"name":"ADV-2007-0690","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2007/0690"},{"name":"22648","refsource":"BID","url":"http://www.securityfocus.com/bid/22648"},{"name":"20070221 Multiple Vulnerabilities in 802.1X Supplicant","refsource":"CISCO","url":"http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml"},{"name":"1017683","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1017683"},{"name":"cisco-cssc-dacl-privilege-escalation(32625)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32625"},{"name":"33047","refsource":"OSVDB","url":"http://osvdb.org/33047"},{"name":"1017684","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1017684"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2007-1066","datePublished":"2007-02-22T01:00:00.000Z","dateReserved":"2007-02-21T00:00:00.000Z","dateUpdated":"2024-08-07T12:43:22.501Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2007-02-22 01:28:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:C/I:C/A:C","baseScore":6.8,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.1,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_services_client:4.0:*:*:*:*:*:*:*","matchCriteriaId":"BDEFEA3C-0595-4A62-8ACA-EBC364BFAEBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_services_client:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3802F8EB-A1B9-42ED-B18F-6DDDE66D1DBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_services_client:4.0.51:*:*:*:*:*:*:*","matchCriteriaId":"63567540-B390-41DB-B3C8-C6F5E47914A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:security_agent:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E171031D-51C1-41BB-96E4-DFFF0C36B74B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:security_agent:5.1:*:*:*:*:*:*:*","matchCriteriaId":"F6DD0915-7671-42CD-8DF3-0B685389C528"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:trust_agent:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7AE07274-FF2E-4D38-8E7A-68535BA3B841"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:trust_agent:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A548227E-0736-44B4-AB8B-930D5B7FC5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:trust_agent:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6AEDB26D-F1DC-4B90-824B-B03EDE92C27A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:trust_agent:2.1:*:*:*:*:*:*:*","matchCriteriaId":"957BB8CB-A3E9-4FB0-A60D-864FD14371C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:meetinghouse:aegis_secureconnect_client:windows_platform:*:*:*:*:*:*:*","matchCriteriaId":"AF7A9BA8-B2C9-417A-86FA-1672EA9886BF"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2007","CveId":"1066","Ordinal":"1","Title":"CVE-2007-1066","CVE":"CVE-2007-1066","Year":"2007"},"notes":[{"CveYear":"2007","CveId":"1066","Ordinal":"1","NoteData":"Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client use an insecure default Discretionary Access Control Lists (DACL) for the connection client GUI, which allows local users to gain privileges by injecting \"a thread under ConnectionClient.exe,\" aka CSCsg20558.","Type":"Description","Title":"CVE-2007-1066"},{"CveYear":"2007","CveId":"1066","Ordinal":"2","NoteData":"2007-02-21","Type":"Other","Title":"Published"},{"CveYear":"2007","CveId":"1066","Ordinal":"3","NoteData":"2017-07-28","Type":"Other","Title":"Modified"}]}}}