Secunia

Secunia Research has discovered a security issue in Numara Asset Manager, which can be exploited by malicious, local users to gain escalated privileges.

The problem is caused due to insecure default file permissions being set on the "Asset Manager" directory. This can be exploited to gain escalated privileges by placing malicious files or replacing files e.g certain DLL files in the directory.

This is related to:
SA25354

The security issue is confirmed in version 8.0. Other versions may also be affected.

Solution
Grant only trusted users access to affected systems until a fix is available.

Provided and/or discovered by
Sven Krewitt, Secunia Research.

Original Advisory
Secunia Research:
http://secunia.com/secunia_research/2007-60/

Deep Links
Links available in Customer Area