AttachmateWRQ Reflection for Secure IT Windows Server Access Restriction Bypass Vulnerability

Bugtraq ID:	14735
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 25 2005 12:00AM
Updated:	Aug 25 2005 12:00AM
Credit:	The vendor disclosed this issue.
Vulnerable:	AttachmateWRQ Reflection for Secure IT 6.0
Not Vulnerable:

AttachmateWRQ Reflection for Secure IT Windows Server Access Restriction Bypass Vulnerability

AttachmateWRQ Reflection for Secure IT Windows Server is susceptible to an access restriction bypass vulnerability. This issue is due to a change in the processing of access control list regular expressions.

This vulnerability allows previously blocked users to gain access to computers running the affected software.

AttachmateWRQ Reflection for Secure IT Windows Server Access Restriction Bypass Vulnerability

An exploit is not required.

AttachmateWRQ Reflection for Secure IT Windows Server Access Restriction Bypass Vulnerability

Solution:
The vendor has released an advisory to address this issue. The advisory details the steps required to resolve this issue. Please see the referenced advisory for further information.

An upgraded version of the affected software is also available from:

https://download.wrq.com/Upgrades/DownloadAgreement.aspx?code=RSSW

AttachmateWRQ Reflection for Secure IT Windows Server Access Restriction Bypass Vulnerability

References:

• Reflection for Secure IT Home Page (AttachmateWRQ)
  
• Reflection for Secure IT Windows Server Security Vulnerability Update and Workar (AttachmateWRQ)
  
• Vulnerability Note VU#758054 - Reflection for Secure IT Windows Server 6.0 chang (US-CERT)