CVE-2007-3184

CVSS V2 High 7.2 CVSS V3 None
Description
Cisco Trust Agent (CTA) before 2.1.104.0, when running on MacOS X, allows attackers with physical access to bypass authentication and modify System Preferences, including passwords, by invoking the Apple Menu when the Access Control Server (ACS) produces a user notification message after posture validation.
Overview
  • CVE ID
  • CVE-2007-3184
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2007-06-12T21:30:00
  • Last Modified Date
  • 2018-10-19T19:03:56
Weakness Enumerations
CWE URL
CWE-287 http://cwe.mitre.org/data/definitions/287.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:a:cisco:trust_agent:*:*:*:*:*:*:*:* 0 OR 2.1.104.0
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:L/AC:L/Au:N/C:C/I:C/A:C
  • Access Vector
  • LOCAL
  • Access Compatibility
  • LOW
  • Authentication
  • NONE
  • Confidentiality Impact
  • COMPLETE
  • Integrity Impact
  • COMPLETE
  • Availability Impact
  • COMPLETE
  • Base Score
  • 7.2
  • Severity
  • HIGH
  • Exploitability Score
  • 3.9
  • Impact Score
  • 10
References
Reference URL Reference Tags
http://www.cisco.com/en/US/products/products_security_response09186a008085d645.html Vendor Advisory
http://www.securityfocus.com/bid/24415 Patch Third Party Advisory VDB Entry
http://www.osvdb.org/35340 Broken Link
http://www.securitytracker.com/id?1018217 Third Party Advisory VDB Entry
http://secunia.com/advisories/25598 Third Party Advisory
http://securityreason.com/securityalert/2796 Exploit Third Party Advisory
http://www.vupen.com/english/advisories/2007/2140 Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/34807 Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/471041/100/0/threaded Third Party Advisory VDB Entry
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2007-3184
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3184
History
Created Old Value New Value Data Type Notes
2022-05-10 18:03:04 Added to TrackCVE