CVE-2007-3184

Cisco Trust Agent (CTA) before 2.1.104.0, when running on MacOS X, allows attackers with physical access to bypass authentication and modify System Preferences, including passwords, by invoking the Apple Menu when the Access Control Server (ACS) produces a user notification message after posture validation.

CVSS v2.0 7.2 HIGH

7.2^/10

CVSS v2.0 : HIGH

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://secunia.com/advisories/25598	Third Party Advisory
http://securityreason.com/securityalert/2796	Exploit Third Party Advisory
http://www.cisco.com/en/US/products/products_security_response09186a008085d645.html	Vendor Advisory
http://www.osvdb.org/35340	Broken Link
http://www.securityfocus.com/archive/1/471041/100/0/threaded	Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/24415	Patch Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1018217	Third Party Advisory VDB Entry
http://www.vupen.com/english/advisories/2007/2140	Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/34807	Third Party Advisory VDB Entry
http://secunia.com/advisories/25598	Third Party Advisory
http://securityreason.com/securityalert/2796	Exploit Third Party Advisory
http://www.cisco.com/en/US/products/products_security_response09186a008085d645.html	Vendor Advisory
http://www.osvdb.org/35340	Broken Link
http://www.securityfocus.com/archive/1/471041/100/0/threaded	Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/24415	Patch Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1018217	Third Party Advisory VDB Entry
http://www.vupen.com/english/advisories/2007/2140	Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/34807	Third Party Advisory VDB Entry

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:cisco:trust_agent:*:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2007-06-12 21:30

Updated : 2025-04-09 00:30

NVD link : CVE-2007-3184

Mitre link : CVE-2007-3184

CVE.ORG link : CVE-2007-3184

JSON object : View

Products Affected

apple

mac_os_x

cisco

trust_agent

CWE

CWE-287

Improper Authentication

{"id": "CVE-2007-3184", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2007-06-12T21:30:00.000", "references": [{"url": "http://secunia.com/advisories/25598", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://securityreason.com/securityalert/2796", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.cisco.com/en/US/products/products_security_response09186a008085d645.html", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/35340", "tags": ["Broken Link"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/471041/100/0/threaded", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/24415", "tags": ["Patch", "Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id?1018217", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2007/2140", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34807", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/25598", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://securityreason.com/securityalert/2796", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.cisco.com/en/US/products/products_security_response09186a008085d645.html", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.osvdb.org/35340", "tags": ["Broken Link"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/archive/1/471041/100/0/threaded", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/24415", "tags": ["Patch", "Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securitytracker.com/id?1018217", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2007/2140", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34807", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-287"}]}], "descriptions": [{"lang": "en", "value": "Cisco Trust Agent (CTA) before 2.1.104.0, when running on MacOS X, allows attackers with physical access to bypass authentication and modify System Preferences, including passwords, by invoking the Apple Menu when the Access Control Server (ACS) produces a user notification message after posture validation."}, {"lang": "es", "value": "Cisco Trust Agent (CTA) anterior a 2.1.104.0, cuando se ejecuta en MacOS X, permite a atacantes con acceso f\u00edsico evitar la autenticaci\u00f3n y modificar las Preferencias del Sistema, incluyendo contrase\u00f1as, invocando el Men\u00fa Apple cuando el servidor de control de acceso (Access Control Server o ACS) produce un mensaje de notificaci\u00f3n al usuario tras una validaci\u00f3n de postura (posture validation)."}], "lastModified": "2025-04-09T00:30:58.490", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:trust_agent:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "527400A7-5CC9-4B43-B0C1-60FBC7795E37", "versionEndExcluding": "2.1.104.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}