HTTP: NAI PGP Keyserver Web Admin Access (1)

This signature detects attempts to exploit a known vulnerability against PGP Keyserver. Attackers can perform administrative tasks without server authentication.

Extended Description

PGP Keyserver is a commercially available encryption software package from Network Associates. It is designed as a PGP public key management system, with features such as LDAP. A problem in the PGP key server makes it possible for remote users to gain administrative access to the interface. Typical administration of the interface passes commands through the http://www.example.com/keyserver/cgi-bin/console.exe?page_size=... and http://www.example.com/keyserver/cgi-bin/cs.exe?action=... commands. These commands, however, may be directly accessed without authentication from the user. This makes it possible for a remote user to deny service to a legitimate user of the system. This could also potentially result in a malicious user replacing PGP Keys with malicious keys, and gaining access to sensitive information.

Affected Products

Network_associates pgp_keyserver

References

BugTraq: 3375

CVE: CVE-2001-1252

Short Name

HTTP:PKG:NAI-PGP-ADMIN-ACCESS-1

Severity

Minor

Recommended

False

Recommended Action

Drop

HTTP: NAI PGP Keyserver Web Admin Access (1)

Extended Description

Affected Products

References

Found a potential security threat?