CVE-2007-3184

Cisco Trust Agent (CTA) before 2.1.104.0, when running on MacOS X, allows attackers with physical access to bypass authentication and modify System Preferences, including passwords, by invoking the Apple Menu when the Access Control Server (ACS) produces a user notification message after posture validation.

• CWE-287

• http://secunia.com/advisories/25598Third Party Advisory
• http://securityreason.com/securityalert/2796Exploit, Third Party Advisory
• http://www.cisco.com/en/US/products/products_security_response09186a008085d645.htmlVendor Advisory
• http://www.osvdb.org/35340Broken Link
• http://www.securityfocus.com/archive/1/471041/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/24415Patch, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1018217Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2007/2140Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34807Third Party Advisory, VDB Entry
• http://secunia.com/advisories/25598Third Party Advisory
• http://securityreason.com/securityalert/2796Exploit, Third Party Advisory
• http://www.cisco.com/en/US/products/products_security_response09186a008085d645.htmlVendor Advisory
• http://www.osvdb.org/35340Broken Link
• http://www.securityfocus.com/archive/1/471041/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/24415Patch, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1018217Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2007/2140Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34807Third Party Advisory, VDB Entry

Published

Jun 12, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-3178Multiple SQL injection vulnerabilities in Zindizayn Okul Web…
• CVE-2007-3179Multiple SQL injection vulnerabilities in archives.php in Pa…
• CVE-2007-3180Buffer overflow in Help and Support Center before 4.4 C on H…
• CVE-2007-3181Buffer overflow in fbserver.exe in Firebird SQL 2 before 2.0…
• CVE-2007-3182Multiple cross-site scripting (XSS) vulnerabilities in Calen…
• CVE-2007-3183Multiple SQL injection vulnerabilities in Calendarix 0.7.200…
• CVE-2007-3185Apple Safari Beta 3.0.1 for Windows public beta allows remot…
• CVE-2007-3186Apple Safari Beta 3.0.1 for Windows allows remote attackers …
• CVE-2007-3187Multiple unspecified vulnerabilities in Apple Safari for Win…
• CVE-2007-3188SQL injection vulnerability in down_indir.asp in Fullaspsite…
• CVE-2007-3189Cross-site scripting (XSS) vulnerability in auth.php in Just…
• CVE-2007-3190Multiple SQL injection vulnerabilities in auth.php in Just F…