CA eTrust Admin GINA模块权限提升漏洞

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1191356 漏洞类型 其他
发布时间 2007-03-08 更新时间 2007-03-09
CVE编号 CVE-2007-1345 CNNVD-ID CNNVD-200703-323
漏洞平台 N/A CVSS评分 4.1
|漏洞来源
https://www.securityfocus.com/bid/22885
https://cxsecurity.com/issue/WLB-2007030102
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200703-323
|漏洞详情
CAeTrustAdmin可为企业提供整体的安全管理策略。CAeTrustAdminGINA组件的口令重置接口中存在权限提升漏洞,允许能够物理交互访问或通过远程桌面访问的攻击者获得管理员权限。
|漏洞EXP


Title: [CAID 35145]: CA eTrust Admin Privilege Escalation

Vulnerability

CA Vuln ID (CAID): 35145

CA Advisory Date: 2007-03-08

Impact: Attackers can gain escalated privileges.

Summary: The CA eTrust Admin GINA component contains a privilege

escalation vulnerability within the reset password interface.

Mitigating Factors: This vulnerability is exploitable only

through physical interactive access or through Remote Desktop.

Severity: CA has given this vulnerability a Medium risk rating.

Affected Products:

eTrust Admin 8.1 SP2 (8.1.2)

eTrust Admin 8.1 SP1 (8.1.1)

eTrust Admin 8.1 (8.1.0)

Affected Platforms:

Windows

Status and Recommendation:

CA has issued an update to correct the vulnerability. Two update

options are available for CA eTrust Admin 8.1 SP2 (8.1.2),

8.1 SP1 (8.1.1), 8.1 (8.1.0):

1. Uninstall GINA and install 8.1 SP2 CR6 or later.

Or

2. Manually replace the affected cube.exe executable with the

fixed cube.exe executable from the 8.1 SP2 CR6 Manual Updates zip

file. The fixed cube.exe file has a date of February 11, 2007 and

a file size of 53,248 bytes.

Both updates can be found at the eTrust Admin Solutions and

Patches page:

http://supportconnectw.ca.com/public/etrust/etrustadmin-dmo/downloads/et
rustadmin-updates.asp

Workaround:

If patch application is not feasible at this time, ensure that

Remote Desktop is disabled and restrict physical host access to

reduce exposure.

How to determine if the installation is affected:

1. Using Windows Explorer, locate the file "cube.exe". By default,

the file is located in the

"C:\Program Files\CA\eTrust Admin GINA Option" directory.

2. Right click on the file and select Properties.

3. Select the General tab.

The installation is vulnerable if the creation date of cube.exe is

earlier than February 11, 2007.

References (URLs may wrap):

CA SupportConnect:

http://supportconnect.ca.com/

CA SupportConnect security notice for this vulnerability:

Security Notice for CA eTrust Admin GINA

http://supportconnectw.ca.com/public/etrust/etrustadmin-dmo/infodocs/etr
ust_secnot_gina.asp

CA Security Advisor posting:

CA eTrust Admin Privilege Escalation Vulnerability

http://www3.ca.com/securityadvisor/newsinfo/collateral.aspx?cid=101038

CAID: 35145

CAID advisory link:

http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=35145

CVE Reference: CVE-2007-1345

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1345

OSVDB Reference: OSVDB ID: 32722

http://osvdb.org/32722

Changelog for this advisory:

v1.0 - Initial Release

Customers who require additional information should contact CA

Technical Support at http://supportconnect.ca.com.

For technical questions or comments related to this advisory,

please send email to vuln AT ca DOT com.

If you discover a vulnerability in CA products, please report

your findings to vuln AT ca DOT com, or utilize our "Submit a

Vulnerability" form.

URL: http://www3.ca.com/securityadvisor/vulninfo/submit.aspx

Regards,

Ken Williams ; 0xE2941985

Director, CA Vulnerability Research

CA, One CA Plaza. Islandia, NY 11749

Contact http://www3.ca.com/contact/

Legal Notice http://www3.ca.com/legal/

Privacy Policy http://www3.ca.com/privacy/

Copyright (c) 2007 CA. All rights reserved.
|受影响的产品
Computer Associates eTrust Admin 8.1.2 SP2 Computer Associates eTrust Admin 8.1.1 SP2 Computer Associates eTrust Admin 8.1
|参考资料

来源:www3.ca.com
链接:http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=35145
来源:XF
名称:ca-etrust-admin-authentication-bypass(32887)
链接:http://xforce.iss.net/xforce/xfdb/32887
来源:SECTRACK
名称:1017740
链接:http://www.securitytracker.com/id?1017740
来源:BID
名称:22885
链接:http://www.securityfocus.com/bid/22885
来源:BUGTRAQ
名称:20070309[CAID35145]:CAeTrustAdminPrivilegeEscalationVulnerability
链接:http://www.securityfocus.com/archive/1/archive/1/462312/100/0/threaded
来源:OSVDB
名称:32722
链接:http://www.osvdb.org/32722
来源:VUPEN
名称:ADV-2007-0885
链接:http://www.frsirt.com/english/advisories/2007/0885
来源:SECUNIA
名称:24441
链接:http://secunia.com/advisories/24441
来源:SREASON
名称:2404
链接:http://securityreason.com/securityalert/2404