Security concern with v6.3.1 and v6.3.2 Log Server and Reporter

Problem Description:

Installing the Log Server and Reporter components launches a program called createdbu which creates or upgrades the Websense Log Database in SQL Server or MSDE. In Websense Web Security Suite and Websense Enterprise versions 6.3.1 and 6.3.2, this program saves a log file called CreateDbInstall.log, which contains information that is useful to Technical Support personnel if a problem is encountered during the process.

This log file contains the complete osql command executed to create or upgrade the database, which includes the user name and password for the SQL account that has permission to manage the Websense Log Database. Since this information appears in clear text, it is possible that employees who have access to the installation machine could view the password and thereby gain unapproved access to SQL Server or MSDE operations.

Resolution:

Until a correction is implemented, you can prevent unauthorized access to SQL Server or MSDE by deleting the following file after successful installation or upgrade of either the Log Server or Websense Reporter component:

<installation path>\SQL\CreateDbInstall.log

The default installation path is C:\Program Files\Websense.

Be sure to delete this file from each machine where either Log Server or Websense Reporter is installed or upgraded. Additionally, if you run the createdbu program manually to create a new catalog database, be sure to delete the CreateDbInstall.log file afterward.

If there are any problems during the installation, copy the file to a secure location before deleting it from the local machine. You may need the file as you work with Websense Technical Support to resolve the problem.

This problem will be fixed in v6.3.3, which is scheduled for release in the first quarter of 2009.

Websense KB3734…

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: