Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client do not properly parse commands, which allows local users to gain privileges via unspecified vectors, aka CSCsh30624.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Secure_services_client | Cisco | 4.x (including) | 4.x (including) |
| Security_agent | Cisco | 5.0 (including) | 5.0 (including) |
| Security_agent | Cisco | 5.1 (including) | 5.1 (including) |
| Trust_agent | Cisco | 1 (including) | 1 (including) |
| Aegis_secureconnect_client | Meetinghouse | windows_platform (including) | windows_platform (including) |