Security Notice for CA eTrust Admin GINA

Last Updated: March 08, 2007

CA's Customer Support is alerting customers to a security risk associated with the CA eTrust Admin GINA software component on the Windows platform. By using the eTrust Admin GINA password reset interface, an attacker can bypass authentication and gain privileged access. The vulnerability can be exploited by an attacker with physical access or through Remote Desktop.

Risk Rating

Medium

Affected Products

CA eTrust Admin 8.1 SP2 (8.1.2)
CA eTrust Admin 8.1 SP1 (8.1.1)
CA eTrust Admin 8.1 (8.1.0)

Affected Platforms

Windows

How to determine if the installation is affected

1. Using Windows Explorer, locate the file "cube.exe". By default, the file is located in the "C:\Program Files\CA\eTrust Admin GINA Option" directory.
2. Right click on the file and select Properties.
3. Select the General tab.

The installation is vulnerable if the creation date of cube.exe is earlier than February 11, 2007.

Product Updates

CA has issued an update to correct the vulnerability. Two update options are available.

CA eTrust Admin 8.1 SP2 (8.1.2), 8.1 SP1 (8.1.1), 8.1 (8.1.0):

1. Uninstall GINA and install 8.1 SP2 CR6 or later.

Or

2. Manually replace the affected cube.exe executable with the fixed cube.exe executable from the 8.1 SP2 CR6 Manual Updates zip file. The fixed cube.exe file has a date of February 11, 2007 and a file size of 53,248 bytes.

Both updates can be found at the eTrust Admin Solutions and Patches page:

http://supportconnectw.ca.com/public/etrust/etrustadmin-dmo/downloads/etrustadmin-updates.asp

Workaround

If applying the patch is not immediately feasible, ensure that Remote Desktop is disabled and restrict physical host access to reduce exposure.

Reference

CVE-2007-1345

Should you require additional information, please contact CA Technical Support at http://supportconnect.ca.com.