Skip content
Are you looking for?
LRQA Cyber Labs

CVE-2015-7596 through CVE-2015-7598 & CVE-2015-7961 through CVE-2015-7967: SafeNet Authentication Service Agent vulnerabilities

Kyriakos Economou Senior R&D team member at Nettitude

Several SafeNet Authentication Service Agents could allow a local attacker to obtain privilege escalation due to weak ACLs assigned to subdirectories and executable modules of those products. A user with low privileges could modify and/or substitute executable modules which a high privileged user could later execute in their own security context.

Further detail

A PDF containing further detail has been released by the vendor.
Their own advisory can be found here: https://safenet.gemalto.com/technical-support/security-updates/.

CVE numbers

A number of CVEs have been issued for vulnerabilities associated with this:

  • CVE-2015-7961
  • CVE-2015-7962
  • CVE-2015-7963
  • CVE-2015-7964
  • CVE-2015-7965
  • CVE-2015-7966
  • CVE-2015-7967
  • CVE-2015-7596
  • CVE-2015-7597
  • CVE-2015-7598

Disclosure timeline

  • Vulnerability Discovered – 01/2016
  • Vendor Notified – 01/2016
  • Vendor Acknowledged Issues – 01/2016
  • Vendor created Security Bulleting with fixed issues – 25/01/2016
  • Vendor notified that advisory is now public – 31/03/2016

Latest Cyber Labs articles

  • Binary Ninja Plugin

    Article

    Recently, in response to a customer incident we needed to reverse engineer a malware sample of WhiteRabbit ransomware...

  • This Badge is My Badge

    Article

    When it comes to covert entry assessments, successfully capturing RFID badge values can mean the difference between failure...

  • Version Tracking in Ghidra

    Article

    When a binary is reverse engineered using Ghidra, various annotations are applied to aid in understanding the binary’s...

  • Cross Site Scripting Payloads

    Article

    We curate a set of fun and interesting Cross Site Scripting (XSS) payloads. They’re designed for quick...

  • Prowl

    Article

    Prowl is an open source data harvesting tool written in Python to help alleviate some of the more...

  • PoshC2 documentation

    Article

    We maintain PoshC2 documentation over at https://poshc2.readthedocs.io/en/latest/. For your convenience, we have also embedded it below.

  • Penetration Testing

    Article

    We are looking for passionate and skilled penetration testers with professional experience. There are multiple roles available...

  • Accelerator Program

    Article

    Do you want a job in cyber security but don’t know how to break into the industry? Tired...

  • Rocktastic

    Article

    Bigger, better (faster, stronger…) Bigger isn’t always better, but sometimes it is. If you need a huge word...