Secure Elements Class 5 AVR server fails to properly authenticate session start messages

2006-05-30T00:00:00
ID VU:487617
Type cert
Reporter CERT
Modified 2007-05-04T18:52:00

Description

Overview

The Secure Elements Class 5 AVR server fails to properly authenticate "session start" messages. This may allow an attacker to cause the server to initiate TCP connections to arbitrary destinations, which can cause a denial of service to both the server and the specified target.

Description

Class 5 AVR

Secure Elements Class 5 AVR (Automated Vulnerability Remediation) is a security product that monitors and enforces security policies on network assets. Class 5 AVR is now known as C5 EVM (Enterprise Vulnerability Management). The Class 5 AVR software includes both server and client components.

Class 5 AVR client

The Class 5 AVR client listens on 60000/udp and an additional tcp port. This client receives commands sent by the Class 5 AVR server.

Class 5 AVR server

The Class 5 AVR server is available as an appliance or as software that runs on commodity hardware. The Class 5 AVR server contains information about network assets, vulnerabilities, and remediation history.

The problem

The Class 5 AVR server fails to properly authenticate "session start" messages.


Impact

A remote, unauthenticated attacker may be able to cause the server to initiate TCP connections to arbitrary destinations, which can cause a denial of service to both the server and the specified target.


Solution

Upgrade or patch
This issue has been resolved in C5 EVM 2.8.1.


Vendor Information

487617

Filter by status: All Affected Not Affected Unknown

Filter by content: __ Additional information available

__ Sort by: Status Alphabetical

Expand all

Javascript is disabled. Click here to view vendors.

Secure Elements __ Affected

Notified: February 06, 2006 Updated: May 30, 2006

Status

Affected

Vendor Statement

Remediation in C5 EVM version 2.8.1 and above

C5 EVM Sensor registrations are invalidated when a Denial Of Service (DOS) attack is suspected / detected.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

CVSS Metrics

Group | Score | Vector
---|---|---
Base | |
Temporal | |
Environmental | |

References

<http://www.secure-elements.com/products/index.htm>

Acknowledgements

Thanks to the NOAA N-CIRT Lab for reporting this vulnerability.

This document was written by Will Dormann.

Other Information

CVE IDs: | None
---|---
Severity Metric: | 0.31
Date Public: | 2006-05-30
Date First Published: | 2006-05-30
Date Last Updated: | 2007-05-04 18:52 UTC
Document Revision: | 7