WatchGuard ServerLock Physical Memory Device Access Vulnerability
BID:8223
Info
WatchGuard ServerLock Physical Memory Device Access Vulnerability
| Bugtraq ID: | 8223 |
| Class: | Access Validation Error |
| CVE: |
CVE-2003-0642 |
| Remote: | No |
| Local: | Yes |
| Published: | Jul 17 2003 12:00AM |
| Updated: | Jul 11 2009 10:56PM |
| Credit: | Discovery of this vulnerability has been credited to Jan Rutkowski <[email protected]>. |
| Vulnerable: |
WatchGuard ServerLock 2.0.3 WatchGuard ServerLock 2.0.2 WatchGuard ServerLock 2.0.1 WatchGuard ServerLock 2.0 |
| Not Vulnerable: |
WatchGuard ServerLock 2.0.4 |
Discussion
WatchGuard ServerLock Physical Memory Device Access Vulnerability
WatchGuard ServerLock has been reported prone to a vulnerability that may allow a local attacker to bypass ServerLock controls.
The issue presents itself because ServerLock fails to sufficiently secure the physical memory of a device. Reportedly, a local attacker may subvert ServerLock access controls by creating symlinks to a target device.
Note that while this vulnerability has been reported to affect WatchGuard ServerLock version 2.0.3 on Windows 2000 systems, previous versions are also likely vulnerable. Other platforms are not known to be affected.
WatchGuard ServerLock has been reported prone to a vulnerability that may allow a local attacker to bypass ServerLock controls.
The issue presents itself because ServerLock fails to sufficiently secure the physical memory of a device. Reportedly, a local attacker may subvert ServerLock access controls by creating symlinks to a target device.
Note that while this vulnerability has been reported to affect WatchGuard ServerLock version 2.0.3 on Windows 2000 systems, previous versions are also likely vulnerable. Other platforms are not known to be affected.
Exploit / POC
WatchGuard ServerLock Physical Memory Device Access Vulnerability
There is no exploit required.
There is no exploit required.
Solution / Fix
WatchGuard ServerLock Physical Memory Device Access Vulnerability
Solution:
WatchGuard has addressed this issue in ServerLock version 2.0.4. For information on how to obtain patches, please visit the WatchGuard LiveSecurity website referenced below.
WatchGuard ServerLock 2.0
WatchGuard ServerLock 2.0.1
WatchGuard ServerLock 2.0.2
WatchGuard ServerLock 2.0.3
Solution:
WatchGuard has addressed this issue in ServerLock version 2.0.4. For information on how to obtain patches, please visit the WatchGuard LiveSecurity website referenced below.
WatchGuard ServerLock 2.0
-
WatchGuard ServerLock Upgrades
https://www.watchguard.com/archive/softwarecenter.asp
WatchGuard ServerLock 2.0.1
-
WatchGuard ServerLock Upgrades
https://www.watchguard.com/archive/softwarecenter.asp
WatchGuard ServerLock 2.0.2
-
WatchGuard ServerLock Upgrades
https://www.watchguard.com/archive/softwarecenter.asp
WatchGuard ServerLock 2.0.3
-
WatchGuard ServerLock Upgrades
https://www.watchguard.com/archive/softwarecenter.asp
References
WatchGuard ServerLock Physical Memory Device Access Vulnerability
References:
References:
- LiveSecurity (WatchGuard)
- WatchGuard Homepage (WatchGuard)
- Bypassing ServerLock protection on Windows 2000 (Jan Rutkowski
)