PT-2013-1926 · Centrify · Centrify Suite+1

Larry W. Cashdollar + 1 · Published 2013-01-04 · Updated 2013-01-08 · CVE-2012-6348

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:L/AC:M/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Centrify Deployment Manager version 2.1.0.283 Centrify Suite versions prior to 2012.5

Description The issue allows local users to overwrite arbitrary files via a symlink attack on the adcheckDMoutput temporary file. Additionally, it enables local users to overwrite arbitrary files and consequently gain privileges via a symlink attack on the centrify.cmd.0 temporary file.

Recommendations For Centrify Deployment Manager version 2.1.0.283, consider updating to a version that is part of Centrify Suite 2012.5 or later. For Centrify Suite versions prior to 2012.5, update to Centrify Suite 2012.5 or later to resolve the issue.

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2012-6348

Affected Products

Centrify Deployment Manager

Centrify Suite

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2012-6348 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2012-12/0036.html · Note
• http://archives.neohapsis.com/archives/bugtraq/2012-12/0037.html · Note
• http://archives.neohapsis.com/archives/bugtraq/2012-12/0113.html · Note
• http://archives.neohapsis.com/archives/bugtraq/2012-12/0071.html · Note
• http://archives.neohapsis.com/archives/bugtraq/2012-12/0097.html · Note
• http://vapid.dhs.org/exploits/centrify_local_r00t.c · Note
• http://vapid.dhs.org/advisories/centrify_deployment_manager_insecure_tmp2.html · Note