CVE-2007-4620

Summary

Multiple stack-based buffer overflows in Computer Associates (CA) Alert Notification Service (Alert.exe) 8.1.586.0, 8.0.450.0, and 7.1.758.0, as used in multiple CA products including Anti-Virus for the Enterprise 7.1 through r11.1 and Threat Manager for the Enterprise 8.1 and r8, allow remote authenticated users to execute arbitrary code via crafted RPC requests.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www.securitytracker.com/id?1019790
• http://securityreason.com/securityalert/3799
• http://www.securitytracker.com/id?1019789
• https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=173103
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41639
• http://community.ca.com/blogs/casecurityresponseblog/archive/2008/04/04/ca-alert-notification-server-multiple-vulnerabilities.aspx
• http://www.vupen.com/english/advisories/2008/1103/references
• http://www.securityfocus.com/archive/1/490466/100/0/threaded
• http://www.securityfocus.com/bid/28605
• http://secunia.com/advisories/29665
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=679

References

• http://www.securitytracker.com/id?1019790
• http://securityreason.com/securityalert/3799
• http://www.securitytracker.com/id?1019789
• https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=173103
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41639
• http://community.ca.com/blogs/casecurityresponseblog/archive/2008/04/04/ca-alert-notification-server-multiple-vulnerabilities.aspx
• http://www.vupen.com/english/advisories/2008/1103/references
• http://www.securityfocus.com/archive/1/490466/100/0/threaded
• http://www.securityfocus.com/bid/28605
• http://secunia.com/advisories/29665
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=679

• ←Previous
• Next→