Cisco Security Monitoring Analysis and Response System Multiple Privilege Escalation Vulnerabilities

Bugtraq ID:	19077
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Jul 19 2006 12:00AM
Updated:	Jul 20 2006 06:27PM
Credit:	These issues were disclosed by the vendor.
Vulnerable:	Nortel Networks Contivity 2000 VPN Switch 4.1.3 Nortel Networks Contivity 2000 VPN Switch 4.1.2 Nortel Networks Contivity 2000 VPN Switch 4.1 Cisco CS-MARS 4.1.5
Not Vulnerable:	Cisco CS-MARS 4.2.1

Cisco Security Monitoring Analysis and Response System Multiple Privilege Escalation Vulnerabilities

Cisco Security Monitoring, Analysis and Response System (CS-MARS) is prone to multiple privilege-escalation vulnerabilities.

An administrative user could exploit these issues to execute arbitrary commands with superuser privileges. This may facilitate a complete compromise of affected computers.

Cisco has released version 4.2.1 to address these issues; prior versions are reported vulnerable.

These issues were previously discussed in BID 19071 (Cisco Security Monitoring Analysis and Response System Multiple Vulnerabilities), which has subsequently been split into individual records.

Cisco Security Monitoring Analysis and Response System Multiple Privilege Escalation Vulnerabilities

Attackers can exploit these issues using standard command-line tools.

Cisco Security Monitoring Analysis and Response System Multiple Privilege Escalation Vulnerabilities

Solution:
Fixes are available. Please see the referenced Cisco advisory for details.

Cisco Security Monitoring Analysis and Response System Multiple Privilege Escalation Vulnerabilities

References:

• Cisco Call Manager Express (Cisco Systems)
  
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Security Monitoring, (Cisco)
  
• Cisco Security Monitoring, Analysis and Response System Homepage (Cisco)
  
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Security Monitoring, (Cisco)