Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2007-3184

Cisco Trust Agent (CTA) before 2.1.104.0, when running on MacOS X, allows attackers with physical access to bypass authentication and modify System Preferences, including passwords, by invoking the Apple Menu when the Access Control Server (ACS) produces a user notification message after posture validation.

Published

2007-06-12T21:30:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.2 (HIGH)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Access Vector: LOCAL
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

3.9

Impact Score

10.0

Weaknesses

Type: Primary
CWE-287

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	cisco	trust_agent	< 2.1.104.0	No
Operating System	apple	mac_os_x	*	Yes

References

http://secunia.com/advisories/25598 Third Party Advisory ([email protected])
http://securityreason.com/securityalert/2796 Exploit, Third Party Advisory ([email protected])
http://www.cisco.com/en/US/products/products_security_response09186a008085d645.html Vendor Advisory ([email protected])
http://www.osvdb.org/35340 Broken Link ([email protected])
http://www.securityfocus.com/archive/1/471041/100/0/threaded Third Party Advisory, VDB Entry ([email protected])
http://www.securityfocus.com/bid/24415 Patch, Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id?1018217 Third Party Advisory, VDB Entry ([email protected])
http://www.vupen.com/english/advisories/2007/2140 Third Party Advisory ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/34807 Third Party Advisory, VDB Entry ([email protected])
http://secunia.com/advisories/25598 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://securityreason.com/securityalert/2796 Exploit, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.cisco.com/en/US/products/products_security_response09186a008085d645.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.osvdb.org/35340 Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/471041/100/0/threaded Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/24415 Patch, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id?1018217 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2007/2140 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/34807 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)