MIT Software I-CAFE Multiple Vulnerabilities

Bugtraq ID:	10748
Class:	Access Validation Error
CVE:
Remote:	No
Local:	Yes
Published:	Jul 19 2004 12:00AM
Updated:	Jul 19 2004 12:00AM
Credit:	Discovery is credited to Lostmon.
Vulnerable:	MIT Software I-Cafe 2.6 rv 2004.72
Not Vulnerable:

MIT Software I-CAFE Multiple Vulnerabilities

I-Cafe is prone to multiple vulnerabilities that may allow local users to gain unauthorized access to a vulnerable computer.

Successful exploitation of various issues can allow the attacker to disable the application, gain access to the local disk, and gain administrative access to the computer.

These issues were reported in I-Cafe version 2.6 revision 2004.72. Other versions may be vulnerable as well.

MIT Software I-CAFE Multiple Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

MIT Software I-CAFE Multiple Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

MIT Software I-CAFE Multiple Vulnerabilities

References:

• I-Cafe Access Restrictions Can By Bypassed By Local Users (SecurityTracker)
  
• I-Cafe Product Page (MIT Software)