CA Internet Security Suite 'UmxEventCli.dll' ActiveX Control Arbitrary File Overwrite Vulnerability
BID:29406
Info
CA Internet Security Suite 'UmxEventCli.dll' ActiveX Control Arbitrary File Overwrite Vulnerability
| Bugtraq ID: | 29406 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 28 2008 12:00AM |
| Updated: | May 28 2008 12:00AM |
| Credit: | Nine:Situations:Group::surfista |
| Vulnerable: |
Computer Associates Internet Security Suite 2008 0 |
| Not Vulnerable: | |
Discussion
CA Internet Security Suite 'UmxEventCli.dll' ActiveX Control Arbitrary File Overwrite Vulnerability
A Computer Associates Internet Security Suite ActiveX control is prone to a vulnerability that lets attackers overwrite files with arbitrary, attacker-controlled content. The issue occurs because the control fails to sanitize user-supplied input.
Successful exploits will compromise affected computers and will aid in further attacks.
Internet Security Suite 2008 is vulnerable; other versions may also be affected.
A Computer Associates Internet Security Suite ActiveX control is prone to a vulnerability that lets attackers overwrite files with arbitrary, attacker-controlled content. The issue occurs because the control fails to sanitize user-supplied input.
Successful exploits will compromise affected computers and will aid in further attacks.
Internet Security Suite 2008 is vulnerable; other versions may also be affected.
Exploit / POC
CA Internet Security Suite 'UmxEventCli.dll' ActiveX Control Arbitrary File Overwrite Vulnerability
To exploit this issue, an attacker must entice an unsuspecting victim into viewing a malicious web page.
The following example exploit code is available:
To exploit this issue, an attacker must entice an unsuspecting victim into viewing a malicious web page.
The following example exploit code is available:
Solution / Fix
CA Internet Security Suite 'UmxEventCli.dll' ActiveX Control Arbitrary File Overwrite Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
CA Internet Security Suite 'UmxEventCli.dll' ActiveX Control Arbitrary File Overwrite Vulnerability
References:
References: