CVE-2016-9795

Related Files

CA Common Services casrvc Privilege Escalation

Posted Jan 28, 2017

Authored by Kevin Kotas | Site www3.ca.com

CA Technologies support is alerting customers about a medium risk vulnerability that may allow a local attacker to gain additional privileges with products using CA Common Services running on the AIX, HP-UX, Linux, and Solaris platforms. The vulnerability, CVE-2016-9795, occurs due to insufficient validation by the casrvc program. A local unprivileged user can exploit the vulnerability to modify arbitrary files, which can potentially allow a local attacker to gain root level access.

tags | advisory, arbitrary, local, root

systems | linux, solaris, aix, hpux

advisories | CVE-2016-9795

SHA-256 | fc6c18b1ab288c81928a10a9339d929938fcd7120518c622254694d974c59667

Download | Favorite | View