Переполнение буфера в службе iGateway в продуктах CA
| Дата публикации: | 25.01.2006 |
| Дата изменения: | 30.06.2009 |
| Всего просмотров: | 2073 |
| Опасность: | Средняя |
| Наличие исправления: | Да |
| Количество уязвимостей: | 1 |
| CVE ID: | Нет данных |
| Вектор эксплуатации: | Локальная сеть |
| Воздействие: | Компрометация системы |
| CWE ID: | Нет данных |
| Наличие эксплоита: | Нет данных |
| Уязвимые продукты: |
BrightStor ARCserve Backup 11.x
BrightStor ARCserve Backup 9.x BrightStor Enterprise Backup 10.x BrightStor ARCserve Backup 11.x (for Windows) eTrust Secure Content Manager (SCM) CA BrightStor SAN Manager 11.x CA BrightStor Portal 11.x CA eTrust Admin 8.x CA ARCserve Backup for Laptops & Desktops 11.x BrightStor Process Automation Manager 11.x BrightStor Storage Resource Manager 11.x BrightStor Storage Resource Manager 6.x CA eTrust Audit 1.x CA eTrust Audit 8.x CA eTrust Identity Minder 8.x CA Threat Manager 8.x eTrust Directory 8.x CA Unicenter Web Services Distributed Management 11.x CA Unicenter AutoSys Job Management 11.x CA Unicenter Management for WebLogic 11.x CA Unicenter Management for WebSphere 11.x CA Unicenter Software Delivery 11.x CA Unicenter Service Level Management 11.x CA Unicenter Application Performance Monitor 11.x CA Unicenter Service Desk 11.x CA Unicenter Service Desk Knowledge Tools 11.x CA Unicenter Asset Portfolio Management 11.x CA Unicenter Service Metric Analysis 11.x CA Unicenter Service Accounting 11.x CA Unicenter Service Assure 11.x CA Unicenter Service Catalog 11.x CA Unicenter Management for Web Servers 11.x CA Unicenter Management for Microsoft Exchange 11.x |
| Уязвимые версии: Advantage Data Transformer (ADT) R2.2 Harvest Change Manager R7.1 BrightStor ARCserve Backup r11.5 BrightStor ARCserve Backup r11.1 BrightStor ARCserve Backup for Windows r11 BrightStor Enterprise Backup 10.5 BrightStor ARCserve Backup v9.01 BrightStor ARCserve Backup Laptop & Desktop r11.1 BrightStor ARCserve Backup Laptop & Desktop r11 BrightStor Process Automation Manager r11.1 BrightStor SAN Manager r11.1 BrightStor SAN Manager r11.5 BrightStor Storage Resource Manager r11.5 BrightStor Storage Resource Manager r11.1 BrightStor Storage Resource Manager 6.4 BrightStor Storage Resource Manager 6.3 BrightStor Portal 11.1 eTrust Audit 1.5 SP2 (iRecorders and ARIES) eTrust Audit 1.5 SP3 (iRecorders and ARIES) eTrust Audit 8.0 (iRecorders and ARIES) eTrust Admin 8.1 eTrust Identity Minder 8.0 eTrust Secure Content Manager (SCM) R8 eTrust Integrated Threat Management (ITM) R8 eTrust Directory R8.1 (Web Components Only) Unicenter CA Web Services Distributed Management R11 Unicenter AutoSys JM R11 Unicenter Management for WebLogic / Management for WebSphere R11 Unicenter Service Delivery R11 Unicenter Service Level Management (USLM) R11 Unicenter Application Performance Monitor R11 Unicenter Service Desk R11 Unicenter Service Desk Knowledge Tools R11 Unicenter Service Fulfillment 2.2 Unicenter Service Fulfillment R11 Unicenter Asset Portfolio Management R11 Unicenter Service Matrix Analysis R11 Unicenter Service Catalog/Fulfillment/Accounting R11 Unicetner MQ Management R11 Unicenter Application Server Managment R11 Unicenter Web Server Management R11 Unicenter Exchange Management R11 Описание: Переполнение динамической памяти обнаружено при обработке негативного значения в поле "Content-Length" HTTP заголовка. Удаленный пользователь может послать специально сформированный запрос на порт приложения 5250/tcp и выполнить произвольный код на системе. URL производителя: www3.ca.com Решение: Установите исправление с сайта производителя. Источник: |
|
| Ссылки: | Computer Associates iTechnology iGateway Service Content-Length Buffer Overflow |