SSH Tectia Manager Process Restart Flaw May Let Local Users Gain Elevated Privileges
|
|
SecurityTracker Alert ID: 1016744
|
|
SecurityTracker URL: http://securitytracker.com/id?1016744
|
|
CVE Reference: CVE-2006-4316
(Links to External Site)
|
Updated: Aug 24 2006
|
Original Entry Date: Aug 23 2006
|
Impact: Execution of arbitrary code via local system, Root access via local system
|
Fix Available: Yes
Exploit Included: Yes
Vendor Confirmed: Yes
|
Version(s): 2.1.2
|
Description: A vulnerability was reported in the SSH Tectia Manager. A local user may be able to obtain elevated privileges.
If the sshd binary has stopped running and a local user has created their own binary named 'sshd' and an administrator subsequently
instructs the management agent to restart the sshd server, then the management agent will kill and restart the user's own 'sshd'
binary. The binary will be started with root privileges.
Linux/UNIX-based systems are affected.
The vendor discovered this
vulnerability.
|
Impact: A local user can obtain root privileges on the target system.
|
Solution: The vendor has issued fixed versions (2.1.3, 2.2.0).
The SSH advisory is available at:
http://www.ssh.com/company/news/article/776/
|
Vendor URL: www.ssh.com/company/news/article/776/ (Links to External Site)
|
Cause: Access control error
|
Underlying OS: Linux (Red Hat Enterprise), Linux (Red Hat Linux), Linux (SuSE), UNIX (AIX), UNIX (HP/UX), UNIX (Solaris - SunOS)
|
|
Message History:
None.
|
Source Message Contents
|
Date: Wed, 23 Aug 2006 15:34:27 -0400
Subject: SSH Tectia Management Agent Process Execution Vulnerability
|
http://www.ssh.com/company/news/article/776/
|
|
