Computer Associates eTrust InoculateIT For Linux Vulnerabilities

Bugtraq ID:	9616
Class:	Unknown
CVE:	CVE-2004-0267
Remote:	No
Local:	Yes
Published:	Feb 09 2004 12:00AM
Updated:	Jul 12 2009 02:06AM
Credit:	Discovery of these issues is credited to Rene <[email protected]>.
Vulnerable:	Computer Associates InoculateIT 6.0 - Caldera OpenLinux 2.4 - Debian Linux 2.2 - IBM AIX 4.3.3 - IBM AIX 4.3.2 - IBM AIX 4.3.1 - IBM AIX 4.3 - IBM AIX 4.2.1 - IBM AIX 4.2 - IBM AIX 4.1.5 - IBM AIX 4.1.4 - IBM AIX 4.1.3 - Mandriva Linux Mandrake 8.0 - Mandriva Linux Mandrake 7.2 - Mandriva Linux Mandrake 7.1 - Redhat Linux 7.1 i386 - Redhat Linux 7.0 i386 - Redhat Linux 6.2 i386 - SCO eDesktop 2.4 - SCO eServer 2.3.1 - SCO eServer 2.3 - Sun Solaris 8_sparc - Sun Solaris 7.0 - Sun Solaris 2.6 - SuSE Linux 7.1 x86 - SuSE Linux 7.0 - SuSE Linux 6.4
Not Vulnerable:

Computer Associates eTrust InoculateIT For Linux Vulnerabilities

Multiple vulnerabilities have been reported in eTrust InoculateIT for Linux operating systems, including issues with temporary files that could allow for symbolic link attacks and permissions problems that could permit local attackers to modify sensitive information.

Computer Associates eTrust InoculateIT For Linux Vulnerabilities

There is no exploit required.

Computer Associates eTrust InoculateIT For Linux Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Computer Associates eTrust InoculateIT For Linux Vulnerabilities

References:

• symlink vul for Antivir / Linux Version 2.0.9-9 (maybe lower) (Rene )