Blue Coat ProxySG Read-Only-Administrator Security Bypass Vulnerability

Bugtraq ID:	42531
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 16 2010 12:00AM
Updated:	Aug 16 2010 12:00AM
Credit:	Thierry Zoller
Vulnerable:	Blue Coat Systems ProxySG 5.5 Blue Coat Systems ProxySG 4.3
Not Vulnerable:	Blue Coat Systems ProxySG 5.5.3.1

Blue Coat ProxySG Read-Only-Administrator Security Bypass Vulnerability

Blue Coat ProxySG is prone to a security-bypass vulnerability.

Remote attackers can exploit this issue to bypass security restrictions and access certain administrative functions.

Versions prior to ProxySG 5.5.3.1 are vulnerable.

Blue Coat ProxySG Read-Only-Administrator Security Bypass Vulnerability

An exploit isn't needed. Attackers may use readily available utilities to launch attacks.

Blue Coat ProxySG Read-Only-Administrator Security Bypass Vulnerability

Solution:
Updates are available. Please see the references for details.

Blue Coat ProxySG Read-Only-Administrator Security Bypass Vulnerability

References:

• Blue Coat ProxySG product page (Blue Coat)
  
• Security Advisories - August 16, 2010 - ProxySG privilege escalation (Blue Coat Systems)