Computer Associates Unicenter Remote Control Host Privilege Escalation Vulnerability

Bugtraq ID:	9206
Class:	Access Validation Error
CVE:
Remote:	No
Local:	Yes
Published:	Dec 12 2003 12:00AM
Updated:	Dec 12 2003 12:00AM
Credit:	Announced by the vendor.
Vulnerable:	Computer Associates Unicenter Remote Control Host 6.0
Not Vulnerable:

Computer Associates Unicenter Remote Control Host Privilege Escalation Vulnerability

It has been reported that Unicenter Remote Control Host are prone to a privilege escalation issue that may allow an attacker to gain unauthorized access to a local system account. The Unicenter Remote Control Host's help interface could be used to exploit system rights and gain unauthorized access to a local system account.

Due to a lack of details, further information about this issue is not available at the moment. This BID will be updated as more information becomes available.

Computer Associates Unicenter Remote Control Host Privilege Escalation Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Computer Associates Unicenter Remote Control Host Privilege Escalation Vulnerability

Solution:
Computer Associates has released a patch to address this issue.


Computer Associates Unicenter Remote Control Host 6.0

• Computer Associates QO48417.CAZ
  ftp://ftp.ca.com/pub/unicenter/TNGRCO/nt/0306/qo48417/QO48417.CAZ

Computer Associates Unicenter Remote Control Host Privilege Escalation Vulnerability

References:

• Unicenter Remote Control 6.0 (Computer Associates)