CVE-2007-2522 Stack-based buffer overflow in the inoweb Console Server in CA Anti-Virus for the Enterprise r8, Threat Manager r8, Anti-Spyware for the Enterprise r8, and Protection Suites r3 allows remote attackers...
HighCVSS 10.0
EPSS 26.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in the inoweb Console Server in CA Anti-Virus for the Enterprise r8, Threat Manager r8, Anti-Spyware for the Enterprise r8, and Protection Suites r3 allows remote attackers to execute arbitrary code via a long (1) username or (2) password.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom antispyware for the enterprise | = 8.0 | No fix listed |
| broadcom etrust integrated threat management | = 8.0 | No fix listed |
| broadcom etrust pestpatrol | = 8.0 | No fix listed |
References
- 20050711 [CAID 35330, 35331]: CA Anti-Virus, CA Threat Manager, and CA Anti-Spyware Console Login and File Mapping Vulnerabilities mailing-list
- 25202 third-party-advisory vendor-advisory
- supportconnectw.ca.com
- VU#680616 third-party-advisory us-government-resource
- 34585 vdb-entry
- 20070511 ZDI-07-028: CA eTrust AntiVirus Server inoweb Buffer Overflow Vulnerability mailing-list
- 23906 vdb-entry
- 1018043 vdb-entry
- ADV-2007-1750 vdb-entry vendor-advisory
- www.zerodayinitiative.com
- ca-console-server-bo(34204) vdb-entry