Protect yourself against future threats.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
===========================================================================
AUSCERT External Security Bulletin Redistribution
ESB-2017.0286
CA20170126-01: Security Notice for CA Common Services casrvc
1 February 2017
===========================================================================
AusCERT Security Bulletin Summary
---------------------------------
Product: CA Common Services
Publisher: CA Technologies
Operating System: AIX
HP-UX
Linux variants
Solaris
Impact/Access: Increased Privileges -- Existing Account
Resolution: Patch/Upgrade
CVE Names: CVE-2016-9795
Original Bulletin:
https://www.ca.com/us/services-support/ca-support/ca-support-online/product-content/recommended-reading/security-notices/ca20170126-01--security-notice-for-ca-common-services-casrvc.html
- --------------------------BEGIN INCLUDED TEXT--------------------
- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
CA20170126-01: Security Notice for CA Common Services casrvc
Issued: January 26, 2017
Last Updated: January 26, 2017
CA Technologies support is alerting customers about a medium risk
vulnerability that may allow a local attacker to gain additional
privileges with products using CA Common Services running on the AIX,
HP-UX, Linux, and Solaris platforms. The vulnerability, CVE-2016-9795,
occurs due to insufficient validation by the casrvc program. A local
unprivileged user can exploit the vulnerability to modify arbitrary
files, which can potentially allow a local attacker to gain root
level access.
Risk Rating
Medium
Platforms
AIX, HP-UX, Linux, Solaris
Affected Products
CA Common Services
Products that include CA Common Services:
CA Client Automation 12.8, 12.9, 14.0
CA SystemEDGE 5.8.2, 5.9
CA Systems Performance for Infrastructure Managers 12.8, 12.9
CA Universal Job Management Agent 11.2
CA Virtual Assurance for Infrastructure Managers 12.8, 12.9
CA Workload Automation AE 11, 11.3, 11.3.5, 11.3.6
Unaffected Products
CA Common Services for z/OS
CA Common Services on the Windows platform
How to determine if the installation is affected
Customers may use the applyptf or equivalent program to determine if
the patch from the solution section is present.
Solution
CA technologies published a fix to resolve the vulnerability for all
affected products.
CA Client Automation
CA SystemEDGE
CA Systems Performance for Infrastructure Managers
CA Universal Job Management Agent
CA Virtual Assurance for Infrastructure Managers
CA Workload Automation AE
Install the following fix for CA Common Services on AIX, HP-UX,
Linux, or Solaris:
RO93360
References
CVE-2016-9795 - CA Common Services casrvc local privilege escalation
Acknowledgement
CVE-2016-9795 - Craig Blackie, NCC Group
Version 1.0: Initial Release
If additional information is required, please contact CA Technologies
Support at https://support.ca.com/
If you discover a vulnerability in CA Technologies products, please
report your findings to the CA Technologies Product Vulnerability
Response Team at vuln <AT> ca.com
Security Notices and PGP key
support.ca.com/irj/portal/anonymous/phpsbpldgpg
www.ca.com/us/support/ca-support-online/documents.aspx?id=3D177782
Regards,
Kevin Kotas
Vulnerability Response Director
CA Technologies Product Vulnerability Response Team
Copyright (c) 2017 CA. 520 Madison Avenue, 22nd Floor, New York, NY
10022. All other trademarks, trade names, service marks, and logos
referenced herein belong to their respective companies.
- -----BEGIN PGP SIGNATURE-----
Charset: utf-8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3D
=3DkfYM
- -----END PGP SIGNATURE-----
- --------------------------END INCLUDED TEXT--------------------
You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.
NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members. As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.
NOTE: This is only the original release of the security bulletin. It may
not be updated when updates to the original are made. If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.
Contact information for the authors of the original document is included
in the Security Bulletin above. If you have any questions or need further
information, please contact them directly.
Previous advisories and external security bulletins can be retrieved from:
http://www.auscert.org.au/render.html?cid=1980
===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072
Internet Email: auscert@auscert.org.au
Facsimile: (07) 3365 7031
Telephone: (07) 3365 4417 (International: +61 7 3365 4417)
AusCERT personnel answer during Queensland business hours
which are GMT+10:00 (AEST).
On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967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=Jxsa
-----END PGP SIGNATURE-----