PT-2005-2122 · Sygate · Sygate Secure Enterprise

Mazin Faour · Published 2005-04-12 · Updated 2016-10-18 · CVE-2005-1103

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Sygate Secure Enterprise versions 3.5 through 4.1

Description The issue allows local users to modify the security policy by exporting the policy file, changing it, and importing it back into the system, due to the lack of prevention of security policy updates by unprivileged users.

Recommendations For Sygate Secure Enterprise versions 3.5 through 4.1, consider restricting access to the policy file to prevent unprivileged users from modifying the security policy until a fix is available.

Fix

Related Identifiers

CVE-2005-1103

Affected Products

Sygate Secure Enterprise

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2005-1103 · Security Note
• http://marc.info/?l=bugtraq&m=111335219201828&w=2 · Note