CVE-2006-4901

Severity

64%

Complexity

99%

Confidentiality

81%

Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, and eTrust Audit 1.5 and r8, allows remote attackers to spoof alerts and conduct replay attacks by invoking eTSAPISend.exe with the desired arguments.

Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, and eTrust Audit 1.5 and r8, allows remote attackers to spoof alerts and conduct replay attacks by invoking eTSAPISend.exe with the desired arguments.

CVSS 2.0 Base Score 6.4. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:N/I:P/A:P).

Overview

Type

Computer Associates eTrust

First reported 18 years ago

2006-09-22 22:07:00

Last updated 6 years ago

2018-10-17 21:40:00

Affected Software

Computer Associates eTrust Audit Client 1.5 SP2

1.5

Computer Associates eTrust Audit Client 1.5 SP3

1.5

Computer Associates eTrust Audit Client r8.0

8.0

Computer Associates eTrust Audit DataTools 1.5 SP2

1.5

Computer Associates eTrust Audit DataTools 1.5 SP3

1.5

Computer Associates eTrust Audit DataTools r8.0

8.0

Computer Associates eTrust Audit Policy Manager 1.5 SP2

1.5

Computer Associates eTrust Audit Policy Manager 1.5 SP3

1.5

Computer Associates eTrust Audit Policy Manager r8.0

8.0

Computer Associates eTrust Security Command Center 1.0

1.0

Computer Associates eTrust Security Command Center r8

8

Computer Associates eTrust Security Command Center r8 SP1 CR1

8

Computer Associates eTrust Security Command Center r8 SP1 CR2

8

References

22023

Exploit, Patch, Vendor Advisory

22073

Vendor Advisory

1016909

1016910

Patch

http://users.tpg.com.au/adsl2dvp/advisories/200608-computerassociates.txt

Exploit, Patch, Vendor Advisory

29011

Exploit, Patch

20060921 [CAID 34616, 34617, 34618]: CA eSCC and eTrust Audit vulnerabilities

20060922 RE: Computer Associates eTrust Security Command Center Multiple Vulnerabilities

20139

Exploit

ADV-2006-3738

http://www3.ca.com/securityadvisor/blogs/posting.aspx?id=90744&pid=93243&date=2006/9

Exploit, Patch, Vendor Advisory

http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34618

Patch, Vendor Advisory

ca-etrust-alert-replay(29107)

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.