CVE-2007-3184
First published: Tue Jun 12 2007(Updated: )
Cisco Trust Agent (CTA) before 2.1.104.0, when running on MacOS X, allows attackers with physical access to bypass authentication and modify System Preferences, including passwords, by invoking the Apple Menu when the Access Control Server (ACS) produces a user notification message after posture validation.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Trust Agent | <2.1.104.0 | |
| Apple iOS and macOS |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.cisco.com/en/US/products/products_security_response09186a008085d645.html
- http://www.securityfocus.com/bid/24415
- http://www.osvdb.org/35340
- http://www.securitytracker.com/id?1018217
- http://secunia.com/advisories/25598
- http://securityreason.com/securityalert/2796
- http://www.vupen.com/english/advisories/2007/2140
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34807
- http://www.securityfocus.com/archive/1/471041/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2007-3184?
CVE-2007-3184 is considered a moderate severity vulnerability due to its potential for unauthorized access with physical access to the affected system.
How do I fix CVE-2007-3184?
To fix CVE-2007-3184, update Cisco Trust Agent to version 2.1.104.0 or later, ensuring your MacOS X is also updated to a secure version.
Who is affected by CVE-2007-3184?
CVE-2007-3184 affects users of Cisco Trust Agent running on MacOS X versions prior to Yosemite with older releases of the software.
What happens if I am vulnerable to CVE-2007-3184?
If vulnerable to CVE-2007-3184, an attacker with physical access can bypass authentication and modify system settings, including passwords.
Is there a workaround for CVE-2007-3184?
There are no known effective workarounds for CVE-2007-3184, and the recommended solution is to apply the update.
- collector/nvd-historical
- agent/event
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/description
- agent/remedy
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco trust agent
- vendor/apple
- canonical/apple ios and macos