Hummingbird Exceed Xconfig Access Validation Vulnerability

Bugtraq ID:	10393
Class:	Access Validation Error
CVE:
Remote:	No
Local:	Yes
Published:	May 21 2004 12:00AM
Updated:	May 21 2004 12:00AM
Credit:	This issue was disclosed by the vendor.
Vulnerable:	Hummingbird Exceed 9.0
Not Vulnerable:

Hummingbird Exceed Xconfig Access Validation Vulnerability

Exceed is prone to a vulnerability that can allow a local attacker to bypass certain access restrictions and edit various configuration settings. The issue occurs as an attacker can bypass restrictions on 'xconfig.exe' program.

A successful attack may allow an attacker to modify configuration settings that can lead to further attacks against the application or the computer.

This issue presents itself in the 'xconfig' application supplied with Exceed 9.0.0.

Hummingbird Exceed Xconfig Access Validation Vulnerability

No exploit is required.

Hummingbird Exceed Xconfig Access Validation Vulnerability

Solution:
The vendor has released a patch to address this issue:


Hummingbird Exceed 9.0

• Hummingbird xconfig_9002.zip
  http://support.hummingbird.com/customer/download.asp?r2=/exceed/900/xc onfig_9002.zip

Hummingbird Exceed Xconfig Access Validation Vulnerability

References:

• Exceed Homepage (Hummingbird LTD.)
  
• xconfig_9002.zip (Hummingbird LTD.)