|
CA eTrust Security Command Center Multiple Vulnerabilities
|
|
Secunia Advisory:
|
SA22023
|
|
|
Release Date:
|
2006-09-22
|
|
Popularity:
|
7,222 views
|
|
|
Critical:
|
Less critical
|
|
Impact:
|
Security Bypass
Manipulation of data
Exposure of system information
Exposure of sensitive information
|
|
Where:
|
From local network
|
|
Solution Status:
|
Vendor Workaround
|
|
| Software: | CA eTrust Security Command Center 1.x
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
| CVE reference: | CVE-2006-4899
CVE-2006-4900
CVE-2006-4901
|
|
Description:
Some vulnerabilities and a weakness have been reported in CA eTrust Security Command Center, which can be exploited by malicious, local users to disclose or manipulate sensitive information, and by malicious people to disclose system information and bypass certain security restrictions.
1) An input validation error in the PIProfile function in the ePPIServlet script can be exploited to disclose the full path to the web server via the quote character.
The weakness has been reported in versions r8, r8 SP1 CR1, r8 SP1 CR2, and 1.0.
2) An error exists in the verification of the temporary file location returned by the "getadhochtml()" function. This can be exploited by a malicious, local user to disclose the content of or delete arbitrary files.
The vulnerability has been reported in versions r8, r8 SP1 CR1, and r8 SP1 CR2.
3) An error caused due to missing authentication in the event alerting system can be exploited to cause false-positive alerts via certain replay attacks.
The vulnerability has been reported in versions r8, r8 SP1 CR1, r8 SP1 CR2, and 1.0.
Solution:
1-2) Apply updates.
http://supportconnectw.ca.com/public/...t_scc/downloads/etrustscc_updates.asp
3) The vendor recommends to filter traffic to the event system.
Provided and/or discovered by:
The vendor credits Patrick Webster.
Original Advisory:
CA:
http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34616
http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34617
http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34618
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
