Cisco Security Agent Unspecified Local Privilege Escalation Vulnerability

Bugtraq ID:	15618
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	Nov 29 2005 12:00AM
Updated:	Nov 29 2005 12:00AM
Credit:	This issue was disclosed by the vendor.
Vulnerable:	Cisco Security Agent for IPCC Hosted 4.5.1 .616 Cisco Security Agent for IPCC Enterprise 4.5.1 .616 Cisco Security Agent for ICM 4.5.1 .616 Cisco Security Agent for CVP 3.1 4.5.1 .573 Cisco Security Agent for CVP 3.0 4.5.1 .573 Cisco Security Agent for CallManager 4.5.1 .628 Cisco Security Agent 4.5.1 Cisco Security Agent 4.5
Not Vulnerable:	Cisco Security Agent for IPCC Hosted 4.5.1 .639 Cisco Security Agent for IPCC Enterprise 4.5.1 .639 Cisco Security Agent for ICM 4.5.1 .639 Cisco Security Agent for CVP 3.1 4.5.1 .639 Cisco Security Agent for CVP 3.0 4.5.1 .639 Cisco Security Agent for CallManager 4.5.1 .639 Cisco Security Agent 4.5.1 .639 Cisco Security Agent 4.0.3 .728 Cisco Security Agent 4.0.3 Cisco Security Agent 4.0.2 Cisco Security Agent 4.0.1 Cisco Security Agent 3.x

Cisco Security Agent Unspecified Local Privilege Escalation Vulnerability

Cisco Security Agent is susceptible to an unspecified local privilege escalation vulnerability. This issue only affects computers running affected versions of Cisco Security Agent on the Microsoft Windows platform.

Further details are not currently available, this BID will be updated as information becomes available.

This issue allows local attackers to gain SYSTEM level privileges on computers running the affected software.

Cisco Security Agent Unspecified Local Privilege Escalation Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Cisco Security Agent Unspecified Local Privilege Escalation Vulnerability

Solution:
Cisco has released an advisory, along with fixes to address this issue. Please see the referenced advisory for further details on obtaining fixes.

Cisco Security Agent Unspecified Local Privilege Escalation Vulnerability

References:

• Cisco Security Advisory: Cisco Security Agent Vulnerable to Privilege Escalation (Cisco)
  
• Cisco Security Agent Home Page (Cisco)