CA License (aka CA Licensing) before 1.90.03 does not properly restrict system commands, which allows local users to gain privileges via unspecified vectors.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| License_software | Broadcom | * | 1.90.02 (including) |
| License_software | Broadcom | 0.1.0.15 (including) | 0.1.0.15 (including) |
| License_software | Broadcom | 1.5.3 (including) | 1.5.3 (including) |
| License_software | Broadcom | 1.8.0.110 (including) | 1.8.0.110 (including) |
| License_software | Broadcom | 1.8.0.114 (including) | 1.8.0.114 (including) |
| License_software | Broadcom | 1.9.1.105 (including) | 1.9.1.105 (including) |
| License_software | Broadcom | 1.52 (including) | 1.52 (including) |
| License_software | Broadcom | 1.60.3 (including) | 1.60.3 (including) |
| License_software | Broadcom | 1.61.8 (including) | 1.61.8 (including) |
| License_software | Broadcom | 1.61.9 (including) | 1.61.9 (including) |
| License_software | Broadcom | 1.70.1.101 (including) | 1.70.1.101 (including) |
References
- http://archives.neohapsis.com/archives/bugtraq/2012-10/0011.html
- http://www.securitytracker.com/id?1027588
- https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7B79CE87E4-7A35-48A3-99BA-5A0DBEDECA94%7D
- http://archives.neohapsis.com/archives/bugtraq/2012-10/0011.html
- http://www.securitytracker.com/id?1027588
- https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7B79CE87E4-7A35-48A3-99BA-5A0DBEDECA94%7D