OSVDB ID: 14389

Title: CA License Server/Client Multiple Command Remote Overflow

Info

Disclosure
Mar 02, 2005

Discovery
Unknown

Dates

Exploit
Unknown

Solution
Mar 02, 2005

Description

 Muliple remote overflows exist in CA License Manager. The LIC98RMT.EXE component fails to validate the parameters passed to several commands resulting in buffer overflows. With a specially crafted request, an attacker can cause arbitrary code execution resulting in a loss of integrity.

Classification

 Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Solution: Upgrade
Exploit: Exploit Public, Exploit Commercial
Disclosure: OSVDB Verified, Vendor Verified

Solution

 Upgrade to version 1.61.9 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Computer Associates International, Inc.

License Package

 1.61.8
1.53

References

Credit
  • Barnaby Jack - infoeEye.com - eEye Digital Security
  • Greg MacManus - iDEFENSE Labs


Direct URL: http://osvdb.org/14389