Quest Toad for Data Analysts Insecure Default Directory Permissions

SA48663

CVE-2012-0279

27 Apr 2012

Less Critical

Unpatched

Quest Toad for Data Analysts 3.x

Local system

Privilege escalation

This covers vulnerabilities where a user is able to conduct certain tasks with the privileges of other users or administrative users.

This typically includes cases where a local user on a client or server system can gain access to the administrator or root account thus taking full control of the system.

Secunia Research has discovered a security issue in Quest Toad for Data Analysts, which can be exploited by malicious, local users to gain escalated privileges.

The problem is that insecure default permissions ("Everyone" group granted "Full Control") are set on the "%CommonProgramFiles%\Quest Shared" directory and some of its child objects. This can be exploited to remove, manipulate, and replace application files.

The security issue is confirmed in version 3.0.1 bundled with Quest Toad Development Suite for Oracle version 11.0R2. Other versions may also be affected.

Set proper permissions to prevent unprivileged users from creating or manipulating files in the directory.

Secunia Research

Secunia Research:
http://secunia.com/secunia_research/2012-13/