Approved changes feed: RSS · Atom

cpe:2.3:a:cisco:trust_agent:2.0.1:*:*:*:*:*:*:*

part: a version: 2.0.1 update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductTrust Agent (84eecbe1-1939-5da6-a317-2a2ed2fe2f6e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-1068 vulnerable 2026-06-08 04:49:41.302770 Details available
The (1) TTLS CHAP, (2) TTLS MSCHAP, (3) TTLS MSCHAPv2, (4) TTLS PAP, (5) MD5, (6) GTC, (7) LEAP, (8) PEAP MSCHAPv2, (9) PEAP GTC, and (10) FAST authentication methods in Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client store transmitted authentication credentials in plaintext log files, which allows local users to obtain sensitive information by reading these files, aka CSCsg34423.
Published: 2007-02-22T01:00:00.000Z
Updated: 2024-08-07T12:43:22.534Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-1066 vulnerable 2026-06-08 04:49:41.297243 Details available
Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client use an insecure default Discretionary Access Control Lists (DACL) for the connection client GUI, which allows local users to gain privileges by injecting "a thread under ConnectionClient.exe," aka CSCsg20558.
Published: 2007-02-22T01:00:00.000Z
Updated: 2024-08-07T12:43:22.501Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-1065 vulnerable 2026-06-08 04:49:41.296583 Details available
Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client allows local users to gain SYSTEM privileges via unspecified vectors in the supplicant, aka CSCsf15836.
Published: 2007-02-22T01:00:00.000Z
Updated: 2024-08-07T12:43:22.496Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-1064 vulnerable 2026-06-08 04:49:41.294437 Details available
Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client do not drop privileges when the help facility in the supplicant GUI is invoked, which allows local users to gain privileges, aka CSCsf14120.
Published: 2007-02-22T01:00:00.000Z
Updated: 2024-08-07T12:43:22.549Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.