RSA Authentication Manager 8.2 SP1 Vulnerabilities in ncurses - False Positive
3 years ago
Originally Published: 2018-03-06
Article Number
000067164
CVE Identifier(s)
CVE-2017-13728, CVE-2017-13729, CVE-2017-13730,CVE-2017-13731, CVE-2017-13732, CVE-2017-13733, CVE-2017-16879
Alert Impact
Not Exploitable
Resolution
CVE-2017-13728

Description

There is an infinite loop in the next_char function in comp_scan.c in ncurses 6.0, related to libtic. A crafted input will lead to a remote denial of service attack.

CVSS v3 Base Score 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Response: The flaw exists but does not add an additional security risk

The RSA Authentication Manager does not use ncurses but there are OS command-line tools which may (however appliance administrators are not expected to use those tools). The RSA Authentication Manager appliance has no unprivileged local users. The only user which can login has access to full root privileges and control of the system (and so does not need to exploit this issue to terminate any tool using ncurses).

CVE-2017-13729

Description

There is an illegal address access in the _nc_save_str function in alloc_entry.c in ncurses 6.0. It will lead to a remote denial of service attack.

CVSS v3 Base Score 6.5 AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Response: The flaw exists but does not add an additional security risk

The RSA Authentication Manager does not use ncurses but there are OS command-line tools which may (however appliance administrators are not expected to use those tools). The RSA Authentication Manager appliance has no unprivileged local users. The only user which can login has access to full root privileges and control of the system (and so does not need to exploit this issue to terminate any tool using ncurses).

CVE-2017-13730

Description

There is an illegal address access in the function _nc_read_entry_source() in progs/tic.c in ncurses 6.0 that might lead to a remote denial of service attack.

CVSS v3 Base Score: 6.5
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Response: The flaw exists but does not add an additional security risk

The RSA Authentication Manager does not use ncurses but there are OS command-line tools which may (however appliance administrators are not expected to use those tools). The RSA Authentication Manager appliance has no unprivileged local users. The only user which can login has access to full root privileges and control of the system (and so does not need to exploit this issue to terminate any tool using ncurses).

CVE-2017-13731

Description

There is an illegal address access in the function postprocess_termcap() in parse_entry.c in ncurses 6.0 that will lead to a remote denial of service attack.
CVSS v3 Base Score: 6.5 
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Response: The flaw exists but does not add an additional security risk

The RSA Authentication Manager does not use ncurses but there are OS command-line tools which may (however appliance administrators are not expected to use those tools). The RSA Authentication Manager appliance has no unprivileged local users. The only user which can login has access to full root privileges and control of the system (and so does not need to exploit this issue to terminate any tool using ncurses).

CVE-2017-13732

Description

There is an illegal address access in the function dump_uses() in progs/dump_entry.c in ncurses 6.0 that might lead to a remote denial of service attack.

CVSS v3 Base Score: 6.5 
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Response: The flaw exists but does not add an additional security risk

The RSA Authentication Manager does not use ncurses but there are OS command-line tools which may (however appliance administrators are not expected to use those tools). The RSA Authentication Manager appliance has no unprivileged local users. The only user which can login has access to full root privileges and control of the system (and so does not need to exploit this issue to terminate any tool using ncurses).

CVE-2017-13733

Description

There is an illegal address access in the fmt_entry function in progs/dump_entry.c in ncurses 6.0 that might lead to a remote denial of service attack.

CVSS v3 Base Score: 6.5
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Response: The flaw exists but does not add an additional security risk

The RSA Authentication Manager does not use ncurses but there are OS command-line tools which may (however appliance administrators are not expected to use those tools). The RSA Authentication Manager appliance has no unprivileged local users. The only user which can login has access to full root privileges and control of the system (and so does not need to exploit this issue to terminate any tool using ncurses).

CVE-2017-16879

Description

Stack-based buffer overflow in the _nc_write_entry function in tinfo/write_entry.c in ncurses 6.0 allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted terminfo file, as demonstrated by tic.

CVSS v3 Base Score: 7.8 
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Response: The flaw exists but does not add an additional security risk

The RSA Authentication Manager does not use ncurses but there are OS command-line tools which may (however appliance administrators are not expected to use those tools). The RSA Authentication Manager appliance has no unprivileged local users. The only user which can login has access to full root privileges and control of the system (and so does not need to exploit this issue to terminate any tool using ncurses).
Disclaimer
Read and use the information in this RSA Security Advisory to assist in avoiding any situation that might arise from the problems described herein. If you have any questions regarding this product alert, contact RSA Software Technical Support at 1- 800 995 5095. RSA Security LLC and its affiliates, including without limitation, its ultimate parent company, EMC Corporation, distributes RSA Security Advisories in order to bring to the attention of users of the affected RSA products, important security information. RSA recommends that all users determine the applicability of this information to their individual situations and take appropriate action. The information set forth herein is provided 'as is' without warranty of any kind. RSA disclaims all warranties, either express or implied, including the warranties of merchantability, fitness for a particular purpose, title and non-infringement. In no event, shall RSA, its affiliates or suppliers, be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if RSA, its affiliates or suppliers have been advised of the possibility of such damages. Some jurisdictions do not allow the exclusion or limitation of liability for consequential or incidental damages, so the foregoing limitation may not apply.

Related Articles

Trending Articles

Don't see what you're looking for?