Diebold GEMS Central Tabulator Vote Database Integrity Compromise Vulnerability
BID:11076
Info
Diebold GEMS Central Tabulator Vote Database Integrity Compromise Vulnerability
| Bugtraq ID: | 11076 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 31 2004 12:00AM |
| Updated: | Aug 31 2004 12:00AM |
| Credit: | Discovery of this vulnerability is credited to Bev Harris. |
| Vulnerable: |
Diebold GEMS Central Tabulator 1.18 Diebold GEMS Central Tabulator 1.17.7 |
| Not Vulnerable: | |
Discussion
Diebold GEMS Central Tabulator Vote Database Integrity Compromise Vulnerability
It is reported that the GEMS Central Tabulator stores received votes in three segregated regions of an Access database. The GEMs system harvests data from each of these database regions in order to generate reports.
All of the tables in these separate database regions are linked together in an attempt to prevent database tampering, by ensuring that the table data corresponds to table data in other database regions.
The Diebold GEMS Central Tabulator is reported prone to a vulnerability, where a two-digit code can be entered into a hidden location to de-link the tables in the GEMS database. This will permit an attacker to add sets of fake votes.
It is reported that the GEMS Central Tabulator stores received votes in three segregated regions of an Access database. The GEMs system harvests data from each of these database regions in order to generate reports.
All of the tables in these separate database regions are linked together in an attempt to prevent database tampering, by ensuring that the table data corresponds to table data in other database regions.
The Diebold GEMS Central Tabulator is reported prone to a vulnerability, where a two-digit code can be entered into a hidden location to de-link the tables in the GEMS database. This will permit an attacker to add sets of fake votes.
Exploit / POC
Diebold GEMS Central Tabulator Vote Database Integrity Compromise Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Diebold GEMS Central Tabulator Vote Database Integrity Compromise Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Diebold GEMS Central Tabulator Vote Database Integrity Compromise Vulnerability
References:
References:
- Consumer Report: Part 2 - Problems with GEMS Central Tabulator (Bev Harris)
- Consumer Reports: Part 4 - Solutions to GEMS central tabulator problem (Bev Harris)
- Diebold Homepage (Diebold)