CVE:CVE-2007-1067
CNNVD:CNNVD-200702-399
Cisco Secure Services Client是一种用于在多个Cisco设备中布署单一基于802.1X认证框架的工具。
Cisco Secure Services Client和终端主机上所安装的Cisco Trust Agent的实现上存在多个漏洞，本地攻击者可能利用这些漏洞获取非授权访问或敏感信息。
权限提升
+--------------------
 由于解析命令中所使用的方式，登录到计算机的非特权用户可能以本地系统用户
  的权限启动进程。这个漏洞记录为Cisco Bug ID CSCsh30297和CSCsh30624
solution:Upgrade cisco secure_services_client to a higher version than 4.x,and avoid the version 4.x; Upgrade cisco security_agent to a higher version than 5.0,5.1,and avoid the version 5.0,5.1; Upgrade cisco trust_agent to a higher version than 1,and avoid the version 1; Upgrade meetinghouse aegis_secureconnect_client to a higher version than windows_platform,and avoid the version windows_platform