Progress Database DBAgent InstallDir Local Privilege Elevation Vulnerability

Bugtraq ID:	7915
Class:	Input Validation Error
CVE:
Remote:	No
Local:	Yes
Published:	Jun 14 2003 12:00AM
Updated:	Jun 14 2003 12:00AM
Credit:	Discovery credited to KF.
Vulnerable:	Progress Database 9.1 D06 Progress Database 9.1 D05 Progress Database 9.1 D - HP HP-UX 11.0 - IBM AIX 4.3.3 - Microsoft Windows 2000 Professional SP3 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP5 - Redhat Linux 7.1 - Redhat Linux 7.0 - Redhat Linux 6.2 - Sun Solaris 2.6 - SuSE Linux 7.2 Progress Database 9.1 C - HP HP-UX 11.0 - IBM AIX 4.3.3 - Microsoft Windows 2000 Professional SP3 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP5 - Redhat Linux 7.1 - Redhat Linux 7.0 - Redhat Linux 6.2 - Sun Solaris 2.6 - SuSE Linux 7.2 Progress Database 9.1 B - HP HP-UX 11.0 - IBM AIX 4.3.3 - Microsoft Windows 2000 Professional SP3 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP5 - Redhat Linux 7.1 - Redhat Linux 7.0 - Redhat Linux 6.2 - Sun Solaris 2.6 - SuSE Linux 7.2 Progress Database 9.1
Not Vulnerable:

Progress Database DBAgent InstallDir Local Privilege Elevation Vulnerability

It has been reported that dbagent packaged with Progress does not properly handle untrusted input in some command line arguments. Because of this, an attacker may be able to gain unauthorized privileges.

Progress Database DBAgent InstallDir Local Privilege Elevation Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Progress Database DBAgent InstallDir Local Privilege Elevation Vulnerability

Solution:
It has been reported that this issue will be fixed in the 10 series of Progress database software. This has not been confirmed by the vendor.

Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Progress Database DBAgent InstallDir Local Privilege Elevation Vulnerability

References:

• Progress Database Product Page (Progress)
  
• SRT2003-06-13-1009 - Progress _dbagent -installdir dlopen() issue (KF )