PT-2011-2613

CVE-2011-0758

·

Publicado

2011-02-07

·

Atualizado

2018-10-09

Descrição por

CVSS 2.0
10
Alta
MétricasAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions CA ETrust Secure Content Manager version 8.0 CA Gateway Security version 8.1
Description The issue allows remote attackers to cause a denial of service and execute arbitrary code via a crafted request to port 1882. This involves an incorrect integer calculation and a heap-based buffer overflow in the eCS component.
Recommendations For CA ETrust Secure Content Manager version 8.0, consider restricting access to port 1882 to minimize the risk of exploitation. For CA Gateway Security version 8.1, avoid using the vulnerable eCS component until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Pesquisadores
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
ZDI-11-059
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾