Info

Disclosure

Sep 20, 2006

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

eTrust Security Command Center contains a flaw that allows a remote attacker to read and delete files outside of the web path. The issue is due to eSMPAuditServlet not properly sanitizing user input, specifically directory traversal style attacks (../../) supplied via the eSCCAdHocHtmlFile parameter.

Classification

Location: Remote / Network Access
Attack Type: Denial of Service, Information Disclosure, Input Manipulation
Impact: Loss of Confidentiality, Loss of Integrity, Loss of Availability
Solution: Patch / RCS
Exploit: Exploit Public
Disclosure: OSVDB Verified, Vendor Verified
OSVDB: Security Software

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, CA has released a patch to address this vulnerability.

Products

Computer Associates	Security Command Center	1.0
		r8
		r8 SP1 CR1
		r8 SP1 CR2

References

CVE ID: 2006-4900 (see also: NVD)
Secunia Advisory ID: 22023 22073
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-09/0357.html
http://archives.neohapsis.com/archives/fulldisclosure/2006-09/0387.html
Other Advisory URL: http://www.aushack.com/200608-computerassociates.txt
http://www.osisecurity.com.au/advisories/computer-associates-etrust-security-command-center-multiple-vulnerabilities
Vendor URL: http://www.ca.com/
Vendor Specific Advisory URL: http://www3.ca.com/securityadvisor/blogs/posting.aspx?id=90744&pid=93243&date=2006/9 [ Link is 404 ]

Credit

Patrick Webster - patrickaushack.com - aushack

Direct URL: http://osvdb.org/29010

Info

Disclosure

Discovery

Dates

Exploit

Solution

Description

Classification

Solution

Products

Computer Associates

Security Command Center

References

Credit