CVE-2007-1345: Medium severity Broadcom Etrust Admin vulnerability

Published Mar 10, 2007

Updated

Unspecified vulnerability in cube.exe in the GINA component for CA (Computer Associates) eTrust Admin 8.1.0 through 8.1.2 allows attackers with physical interactive or Remote Desktop access to bypass authentication and gain privileges via the password reset interface.

Affected Software

3 affected components

Broadcom Etrust Admin=8.1

Broadcom Etrust Admin=8.1.1

Broadcom Etrust Admin=8.1.2

Remediation

Patch Available

http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=35145

Event History

Mar 10, 2007

CVE Published

07:19 PM

Mar 11, 2007

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-1345?

CVE-2007-1345 is considered a high severity vulnerability due to its potential to allow unauthorized access and privilege escalation.

How do I fix CVE-2007-1345?

To fix CVE-2007-1345, upgrade the CA eTrust Admin to a version later than 8.1.2.

Who is affected by CVE-2007-1345?

Users of CA eTrust Admin versions 8.1.0 through 8.1.2 are potentially affected by CVE-2007-1345.

What kind of access is needed to exploit CVE-2007-1345?

Exploitation of CVE-2007-1345 requires physical interactive or Remote Desktop access to the system.

What can attackers do with CVE-2007-1345?

Attackers can bypass authentication and gain elevated privileges through the password reset interface due to CVE-2007-1345.