PT-2006-5654 · Computer Associates · Etrust Audit+1

Published 2006-09-22 · Updated 2021-04-09 · CVE-2006-4901

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Computer Associates (CA) eTrust Security Command Center versions 1.0 and r8 up to SP1 CR2 Computer Associates (CA) eTrust Audit versions 1.5 and r8

Description The issue allows remote attackers to spoof alerts and conduct replay attacks by invoking eTSAPISend.exe with the desired arguments.

Recommendations For Computer Associates (CA) eTrust Security Command Center versions 1.0 and r8 up to SP1 CR2, consider restricting access to eTSAPISend.exe to prevent spoofing and replay attacks. For Computer Associates (CA) eTrust Audit versions 1.5 and r8, consider restricting access to eTSAPISend.exe to prevent spoofing and replay attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2006-4901

Affected Products

Etrust Audit

Ca Etrust Security Command Center

References · 16

• 🔥 http://securityfocus.com/bid/20139 · Exploit
• 🔥 http://osvdb.org/29011 · Exploit
• 🔥 http://secunia.com/advisories/22023 · Exploit
• 🔥 https://exploit-db.com/exploits/28642 · Exploit
• 🔥 http://users.tpg.com.au/adsl2dvp/advisories/200608-computerassociates.txt · Exploit
• 🔥 http://www3.ca.com/securityadvisor/blogs/posting.aspx?id=90744&pid=93243&date=2006/9 · Exploit
• http://securitytracker.com/id?1016910 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-4901 · Security Note
• http://secunia.com/advisories/22073 · Vendor Advisory
• http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34618 · Vendor Advisory
• http://securitytracker.com/id?1016909 · Note
• https://t.me/cvenotify/13008 · Telegram Post
• http://vupen.com/english/advisories/2006/3738 · Note
• http://securityfocus.com/archive/1/446716/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29107 · Note