CVE-2011-0758 The eCS component (ECSQdmn.exe) in CA ETrust Secure Content Manager 8.0 and CA Gateway Security 8.1 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafte...
HighCVSS 10.0
EPSS 8.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The eCS component (ECSQdmn.exe) in CA ETrust Secure Content Manager 8.0 and CA Gateway Security 8.1 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafted request to port 1882, involving an incorrect integer calculation and a heap-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ca etrust secure content manager | = 8.0 | No fix listed |
| ca gateway security | = 8.1 | No fix listed |
References
- dvlabs.tippingpoint.com
- 70840 vdb-entry
- 43200 third-party-advisory vendor-advisory
- 8075 third-party-advisory
- 20110207 ZDI-11-059: CA ETrust Secure Content Manager Common Services Transport Remote Code Execution Vulnerability mailing-list
- 46253 vdb-entry
- 1025052 vdb-entry
- ADV-2011-0306 vdb-entry vendor-advisory
- www.zerodayinitiative.com
- support.ca.com