CVE-2006-4901

Published: Sep 22, 2006Modified: Apr 16, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, and eTrust Audit 1.5 and r8, allows remote attackers to spoof alerts and conduct replay attacks by invoking eTSAPISend.exe with the desired arguments.

Affected (13)

Products: Broadcom: Etrust Audit Client, Etrust Audit Datatools, Etrust Audit Policy Manager, Etrust Security Command Center

4 products

Etrust Audit Client

Etrust Audit Datatools

Etrust Audit Policy Manager

Etrust Security Command Center

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Broadcom Etrust Audit Client	Version 1.5 sp2
Broadcom Etrust Audit Client	Version 1.5 sp3
Broadcom Etrust Audit Client	Version 8.0
Broadcom Etrust Audit Datatools	Version 1.5 sp2
Broadcom Etrust Audit Datatools	Version 1.5 sp3
Broadcom Etrust Audit Datatools	Version 8.0
Broadcom Etrust Audit Policy Manager	Version 1.5 sp2
Broadcom Etrust Audit Policy Manager	Version 1.5 sp3
Broadcom Etrust Audit Policy Manager	Version 8.0
Broadcom Etrust Security Command Center	Version 1.0
Broadcom Etrust Security Command Center	Version 8
Broadcom Etrust Security Command Center	Version 8 sp1
Broadcom Etrust Security Command Center	Version 8 sp1

References (26)

http://secunia.com/advisories/22023

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://secunia.com/advisories/22073

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1016909

Source: cve@mitre.org

http://securitytracker.com/id?1016910

Source: cve@mitre.org

Patch

http://users.tpg.com.au/adsl2dvp/advisories/200608-computerassociates.txt

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://www.osvdb.org/29011

Source: cve@mitre.org

ExploitPatch

http://www.securityfocus.com/archive/1/446611/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/446716/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/20139

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2006/3738

Source: cve@mitre.org

http://www3.ca.com/securityadvisor/blogs/posting.aspx?id=90744&pid=93243&date=2006/9

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34618

Source: cve@mitre.org

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/29107

Source: cve@mitre.org

http://secunia.com/advisories/22023

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

http://secunia.com/advisories/22073

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securitytracker.com/id?1016909

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1016910

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://users.tpg.com.au/adsl2dvp/advisories/200608-computerassociates.txt

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

http://www.osvdb.org/29011

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

http://www.securityfocus.com/archive/1/446611/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/446716/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/20139

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.vupen.com/english/advisories/2006/3738

Source: af854a3a-2127-422b-91ae-364da2661108

http://www3.ca.com/securityadvisor/blogs/posting.aspx?id=90744&pid=93243&date=2006/9

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34618

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/29107

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.