Title: CA Multiple Products Scan Job Description Field Format String
Info
Disclosure
Jun 27, 2006
Discovery
Unknown
Dates
Exploit
Unknown
Solution
Unknown
Description
CA Integrated Threat Management, eTrust Antivirus and eTrust PestPatrol Anti-Spyware Corporate Edition contain a flaw that may allow a remote denial of service. The issue is triggered when a format string error occurs when handling the description field of a scan job, and will result in loss of availability for the platform.
Classification
Location:
Remote / Network Access,
Local / Remote,
Context Dependent
Attack Type:
Denial of Service,
Input Manipulation
Impact:
Loss of Integrity,
Loss of Availability
Exploit:
Exploit Unknown
OSVDB:
Web Related
Solution
Upgrade to Content Update build 432 via the content update mechanism, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.