Hummingbird Connectivity INETD32 Privilege Escalation Vulnerability

Bugtraq ID:	11539
Class:	Access Validation Error
CVE:
Remote:	No
Local:	Yes
Published:	Oct 26 2004 12:00AM
Updated:	Oct 26 2004 12:00AM
Credit:	CESG Network Defence Team disclosed this vulnerability.
Vulnerable:	Hummingbird Connectivity 9.0 Hummingbird Connectivity 7.1
Not Vulnerable:

Hummingbird Connectivity INETD32 Privilege Escalation Vulnerability

Hummingbird Connectivity is reported prone to a privilege escalation vulnerability in its inetd32 application.

This vulnerability allows users with local interactive access to execute arbitrary applications with administrative privileges.

Version 7.1 and 9.0 are reported vulnerable to this issue. Other versions are also likely affected.

Hummingbird Connectivity INETD32 Privilege Escalation Vulnerability

An exploit is not required.

Hummingbird Connectivity INETD32 Privilege Escalation Vulnerability

Solution:
It is reported that Hummingbird has fixes available for this issue, but it has not been confirmed. Please contact the vendor for further information on obtaining fixes.

Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Hummingbird Connectivity INETD32 Privilege Escalation Vulnerability

References:

• Connectivity Home Page (Hummingbird LTD.)
  
• NISCC Vulnerability Advisory 841713/Hummingbird (NISCC)