The default installation of eTrust Access Control (formerly SeOS) uses a default encryption key, which allows remote attackers to spoof the eTrust administrator and gain privileges.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Etrust_access_control | Broadcom | 4.1 (including) | 4.1 (including) |
| Etrust_access_control | Broadcom | 5.0 (including) | 5.0 (including) |
| Etrust_access_control | Ca | 4.1-sp1 (including) | 4.1-sp1 (including) |
| Etrust_access_control | Ca | 5.0-sp1 (including) | 5.0-sp1 (including) |
References
- http://support.ca.com/techbases/eTrust/etrust_access_control-response.html
- http://www.osvdb.org/1517
- http://www.securityfocus.com/bid/1583
- http://www.securityfocus.com/templates/archive.pike?list=1\u0026msg=004601c003a1%24ba473260%24ddeaa2cd%40itradefair.net
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5076
- http://support.ca.com/techbases/eTrust/etrust_access_control-response.html
- http://www.osvdb.org/1517
- http://www.securityfocus.com/bid/1583
- http://www.securityfocus.com/templates/archive.pike?list=1\u0026msg=004601c003a1%24ba473260%24ddeaa2cd%40itradefair.net
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5076