ScriptLogic RunAdmin Service Administrative Access Vulnerability

Bugtraq ID:	7477
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 30 2003 12:00AM
Updated:	Apr 30 2003 12:00AM
Credit:	Discovery of this vulnerability credited to CERT/CC.
Vulnerable:	ScriptLogic Corporation ScriptLogic 4.1
Not Vulnerable:	ScriptLogic Corporation ScriptLogic 4.15 ScriptLogic Corporation ScriptLogic 4.14

ScriptLogic RunAdmin Service Administrative Access Vulnerability

ScriptLogic contains a RunAdmin service that allows unprivileged users to modify the configuration of the client workstation. Due to a design error, an unprivileged user could cause their own scripts to be executed on any workstation within the domain managed by the ScriptLogic server.

ScriptLogic RunAdmin Service Administrative Access Vulnerability

There is no specific exploit code required.

ScriptLogic RunAdmin Service Administrative Access Vulnerability

Solution:
The vendor has released version 4.14 and later to address this issue.


ScriptLogic Corporation ScriptLogic 4.1

• ScriptLogic Corporation ScriptLogic 4.15
  http://www.scriptlogic.com/common/download-license.asp?product=ScriptL ogic&version=4.15&link=/eng/download-locations-sl4.asp

ScriptLogic RunAdmin Service Administrative Access Vulnerability

References:

• ScriptLogic Corporation (ScriptLogic Corporation)
  
• Vulnerability Note VU#231705 (CERT/CC)