Sybase Afaria Data Security Manager for Symbian Login Security Bypass Vulnerability

Bugtraq ID:	46552
Class:	Access Validation Error
CVE:
Remote:	No
Local:	Yes
Published:	Jan 07 2011 12:00AM
Updated:	Jan 07 2011 12:00AM
Credit:	Sybase
Vulnerable:	Sybase Afaria 6.6 GA Sybase Afaria 6.5 Feature Pack 1
Not Vulnerable:	Sybase Afaria 6.6 Hot-fix 2011-01 Sybase Afaria 6.5 Hot-fix 81

Sybase Afaria Data Security Manager for Symbian Login Security Bypass Vulnerability

Sybase Afaria Data Security Manager on Symbian devices is prone to a security-bypass vulnerability.

An attacker with physical access to a locked device can exploit this issue to bypass the security login password to access a user's data. This may aid in further attacks.

Sybase Afaria Data Security Manager for Symbian Login Security Bypass Vulnerability

Attackers need a physical access to the affected device to exploit this issue.

Sybase Afaria Data Security Manager for Symbian Login Security Bypass Vulnerability

Solution:
Updates are available. Please see the references for more information.

Sybase Afaria Data Security Manager for Symbian Login Security Bypass Vulnerability

References:

• Sybase Homepage (Sybase)
  
• Urgent from Sybase: Afaria Data Security Manager Vulnerability. (Sybase)