mailing list archives
[CAID 35145]: CA eTrust Admin Privilege Escalation Vulnerability
From: "Williams, James K" <James.Williams () ca com>
Date: Thu, 8 Mar 2007 21:59:23 -0500
Title: [CAID 35145]: CA eTrust Admin Privilege Escalation
CA Vuln ID (CAID): 35145
CA Advisory Date: 2007-03-08
Impact: Attackers can gain escalated privileges.
Summary: The CA eTrust Admin GINA component contains a privilege
escalation vulnerability within the reset password interface.
Mitigating Factors: This vulnerability is exploitable only
through physical interactive access or through Remote Desktop.
Severity: CA has given this vulnerability a Medium risk rating.
eTrust Admin 8.1 SP2 (8.1.2)
eTrust Admin 8.1 SP1 (8.1.1)
eTrust Admin 8.1 (8.1.0)
Status and Recommendation:
CA has issued an update to correct the vulnerability. Two update
options are available for CA eTrust Admin 8.1 SP2 (8.1.2),
8.1 SP1 (8.1.1), 8.1 (8.1.0):
1. Uninstall GINA and install 8.1 SP2 CR6 or later.
2. Manually replace the affected cube.exe executable with the
fixed cube.exe executable from the 8.1 SP2 CR6 Manual Updates zip
file. The fixed cube.exe file has a date of February 11, 2007 and
a file size of 53,248 bytes.
Both updates can be found at the eTrust Admin Solutions and
If patch application is not feasible at this time, ensure that
Remote Desktop is disabled and restrict physical host access to
How to determine if the installation is affected:
1. Using Windows Explorer, locate the file "cube.exe". By default,
the file is located in the
"C:\Program Files\CA\eTrust Admin GINA Option" directory.
2. Right click on the file and select Properties.
3. Select the General tab.
The installation is vulnerable if the creation date of cube.exe is
earlier than February 11, 2007.
References (URLs may wrap):
CA SupportConnect security notice for this vulnerability:
Security Notice for CA eTrust Admin GINA
CA Security Advisor posting:
CA eTrust Admin Privilege Escalation Vulnerability
CAID advisory link:
CVE Reference: CVE-2007-1345
OSVDB Reference: OSVDB ID: 32722
Changelog for this advisory:
v1.0 - Initial Release
Customers who require additional information should contact CA
Technical Support at http://supportconnect.ca.com.
For technical questions or comments related to this advisory,
please send email to vuln AT ca DOT com.
If you discover a vulnerability in CA products, please report
your findings to vuln AT ca DOT com, or utilize our "Submit a
Ken Williams ; 0xE2941985
Director, CA Vulnerability Research
CA, One CA Plaza. Islandia, NY 11749
Legal Notice http://www3.ca.com/legal/
Copyright (c) 2007 CA. All rights reserved.
Full-Disclosure - We believe in it.
Hosted and sponsored by Secunia - http://secunia.com/
- [CAID 35145]: CA eTrust Admin Privilege Escalation Vulnerability Williams, James K (Mar 09)