Vulnerability CVE-2007-3184
Published: 2007-06-12   Modified: 2012-02-12

Description:
Cisco Trust Agent (CTA) before 2.1.104.0, when running on MacOS X, allows attackers with physical access to bypass authentication and modify System Preferences, including passwords, by invoking the Apple Menu when the Access Control Server (ACS) produces a user notification message after posture validation.

See advisories in our WLB2 database:
Topic
Author
Date
Med.
Cisco Trust Agent Vulnerability
adblake
15.06.2007

Type:

CWE-287

 (Improper Authentication)

CVSS2 => (AV:L/AC:L/Au:N/C:C/I:C/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
7.2/10
10/10
3.9/10
Exploit range
Attack complexity
Authentication
Local
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
Complete
Affected software
Cisco -> Trust agent 
Apple -> Mac os x 

 References:
http://securityreason.com/securityalert/2796
http://www.cisco.com/en/US/products/products_security_response09186a008085d645.html
http://www.securityfocus.com/archive/1/471041/100/0/threaded
http://www.securityfocus.com/bid/24415
http://www.securitytracker.com/id?1018217
http://www.vupen.com/english/advisories/2007/2140
https://exchange.xforce.ibmcloud.com/vulnerabilities/34807
Copyright 2024, cxsecurity.com

 

Back to Top