Multiple Computer Associates (CA) products Console Server buffer overflow
| ca-console-server-bo (34204) |  High Risk |
Description:
Multiple Computer Associates (CA) Anti-Virus and Anti-Spyware products are vulnerable to a stack-based buffer overflow, caused by improper bounds checking of the Console Server login credentials by the inoweb service. By attempting to log in using an overly long username or password, a remote attacker could overflow a buffer and execute arbitrary code on the system with elevated privileges or cause the application to crash.
Platforms Affected:
- CA, Anti-Virus for the Enterprise 8
- CA, eTrust Integrated Threat Management 8.0
- CA, eTrust PestPatrol 8.0
Remedy:
Refer to the CA SupportConnect Security Notice 050807 for patch or upgrade information. See References.
Consequences:
Gain Access
References:
- CA SupportConnect Security Notice 050807, CA Anti-Virus for the Enterprise CA Threat Manager CA Anti-Spyware Security Notice at http://supportconnectw.ca.com/public/antivirus/infodocs/caav-secnotice050807.asp.
- ZDI-07-028, CA eTrust AntiVirus Server inoweb Buffer Overflow Vulnerability at http://www.zerodayinitiative.com/advisories/ZDI-07-028.html.
- BID-23906: CA Multiple Products Console Server and InoCore.dll Remote Code Execution Vulnerabilities
- CVE-2007-2522: Stack-based buffer overflow in the inoweb Console Server in CA Anti-Virus for the Enterprise r8, Threat Manager r8, Anti-Spyware for the Enterprise r8, and Protection Suites r3 allows remote attackers to execute arbitrary code via a long (1) username or (2) password.
- FrSIRT/ADV-2007-1750: CA Multiple Products Console Server and InoCore.dll Code Execution Vulnerabilities
- OSVDB ID: 34585: CA Multiple Product Console Server Authentication Remote Overflow
- SA25202: CA Products Buffer Overflow and Privilege Escalation Vulnerabilities
- SECTRACK ID: 1018043: CA Anti-Virus for the Enterprise Buffer Overflows Let Remote and Local Users Execute Arbitrary Code
- US-CERT VU#680616: Computer Associates eTrust AntiVirus Server buffer overflow
Reported:
May 08, 2007
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
Copyright (c) 1994-2008 Internet Security Systems, Inc. All rights reserved worldwide.
For corrections or additions please email xforce@iss.net