Approved changes feed: RSS · Atom

cpe:2.3:a:cisco:security_agent:5.0:*:*:*:*:*:*:*

part: a version: 5.0 update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductSecurity Agent (55c37f59-7aac-53c8-90f1-0a3fa48f0ce5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-5580 vulnerable 2026-06-08 04:50:06.447606 Details available
Buffer overflow in a certain driver in Cisco Security Agent 4.5.1 before 4.5.1.672, 5.0 before 5.0.0.225, 5.1 before 5.1.0.106, and 5.2 before 5.2.0.238 on Windows allows remote attackers to execute arbitrary code via a crafted SMB packet in a TCP session on port (1) 139 or (2) 445.
Published: 2007-12-15T01:00:00.000Z
Updated: 2024-08-07T15:39:13.565Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-1068 vulnerable 2026-06-08 04:49:41.302688 Details available
The (1) TTLS CHAP, (2) TTLS MSCHAP, (3) TTLS MSCHAPv2, (4) TTLS PAP, (5) MD5, (6) GTC, (7) LEAP, (8) PEAP MSCHAPv2, (9) PEAP GTC, and (10) FAST authentication methods in Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client store transmitted authentication credentials in plaintext log files, which allows local users to obtain sensitive information by reading these files, aka CSCsg34423.
Published: 2007-02-22T01:00:00.000Z
Updated: 2024-08-07T12:43:22.534Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-1067 vulnerable 2026-06-08 04:49:41.301056 Details available
Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client do not properly parse commands, which allows local users to gain privileges via unspecified vectors, aka CSCsh30624.
Published: 2007-02-22T01:00:00.000Z
Updated: 2024-08-07T12:43:22.504Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-1066 vulnerable 2026-06-08 04:49:41.297168 Details available
Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client use an insecure default Discretionary Access Control Lists (DACL) for the connection client GUI, which allows local users to gain privileges by injecting "a thread under ConnectionClient.exe," aka CSCsg20558.
Published: 2007-02-22T01:00:00.000Z
Updated: 2024-08-07T12:43:22.501Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-1065 vulnerable 2026-06-08 04:49:41.296507 Details available
Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client allows local users to gain SYSTEM privileges via unspecified vectors in the supplicant, aka CSCsf15836.
Published: 2007-02-22T01:00:00.000Z
Updated: 2024-08-07T12:43:22.496Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-1064 vulnerable 2026-06-08 04:49:41.292139 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-5553 vulnerable 2026-06-08 04:49:20.793145 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.