PT-2007-2747 · Ca · Etrust Admin

James K + 1 · Published 2007-03-10 · Updated 2021-04-09 · CVE-2007-1345

Positive Technologies (AI Summary)

CVSS v2.0

4.1

Medium

Base vector

AV:L/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CA eTrust Admin versions 8.1.0 through 8.1.2

Description The issue allows attackers with physical interactive or Remote Desktop access to bypass authentication and gain privileges via the password reset interface in the GINA component of CA eTrust Admin.

Recommendations For versions 8.1.0 through 8.1.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2007-1345

Affected Products

Etrust Admin

References · 10

• http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=35145 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2007-1345 · Security Note
• http://secunia.com/advisories/24441 · Vendor Advisory
• http://securitytracker.com/id?1017740 · Note
• http://securityfocus.com/archive/1/462312/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32887 · Note
• http://vupen.com/english/advisories/2007/0885 · Note
• http://securityfocus.com/bid/22885 · Note
• http://osvdb.org/32722 · Note
• http://securityreason.com/securityalert/2404 · Note