Approved changes feed: RSS · Atom

cpe:2.3:a:meetinghouse:aegis_secureconnect_client:windows_platform:*:*:*:*:*:*:*

part: a version: windows_platform update: *

VendorMeetinghouse (cf60c746-e731-5c09-8cd5-7d1dad0e8477)
ProductAegis Secureconnect Client (f42d8c27-ea54-51a4-a309-c66f5b5ecf45)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-1068 vulnerable 2026-06-08 04:49:41.302809 Details available
The (1) TTLS CHAP, (2) TTLS MSCHAP, (3) TTLS MSCHAPv2, (4) TTLS PAP, (5) MD5, (6) GTC, (7) LEAP, (8) PEAP MSCHAPv2, (9) PEAP GTC, and (10) FAST authentication methods in Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client store transmitted authentication credentials in plaintext log files, which allows local users to obtain sensitive information by reading these files, aka CSCsg34423.
Published: 2007-02-22T01:00:00.000Z
Updated: 2024-08-07T12:43:22.534Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-1067 vulnerable 2026-06-08 04:49:41.302072 Details available
Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client do not properly parse commands, which allows local users to gain privileges via unspecified vectors, aka CSCsh30624.
Published: 2007-02-22T01:00:00.000Z
Updated: 2024-08-07T12:43:22.504Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-1066 vulnerable 2026-06-08 04:49:41.297283 Details available
Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client use an insecure default Discretionary Access Control Lists (DACL) for the connection client GUI, which allows local users to gain privileges by injecting "a thread under ConnectionClient.exe," aka CSCsg20558.
Published: 2007-02-22T01:00:00.000Z
Updated: 2024-08-07T12:43:22.501Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-1065 vulnerable 2026-06-08 04:49:41.296623 Details available
Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client allows local users to gain SYSTEM privileges via unspecified vectors in the supplicant, aka CSCsf15836.
Published: 2007-02-22T01:00:00.000Z
Updated: 2024-08-07T12:43:22.496Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-1064 vulnerable 2026-06-08 04:49:41.295821 Details available
Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client do not drop privileges when the help facility in the supplicant GUI is invoked, which allows local users to gain privileges, aka CSCsf14120.
Published: 2007-02-22T01:00:00.000Z
Updated: 2024-08-07T12:43:22.549Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.