The Vigil@nce team watches public vulnerabilities impacting your computers, and then offers security solutions, a vigilance database and tools to fix them.

Vulnerability of CA AV eTrust: buffer overflows of Alert service

Synthesis of the vulnerability 

Several buffer overflows affect Computer Associates products using the Alert service.
Impacted software: CA Antivirus, e-Trust Antivirus.
Severity of this computer vulnerability: 3/4.
Creation date: 20/07/2007.
Références of this announce: CAID 35515, CERTA-2007-AVI-315, CVE-2007-3825, VIGILANCE-VUL-7024.

Description of the vulnerability 

The Alert service is used by several Computer Associates products:
 - CA Threat Manager for the Enterprise
 - CA Anti-Virus for the Enterprise
 - CA Protection Suites
 - BrightStor ARCserve

This service installs the 3d742890-397c-11cf-9bf1-00805f88cb72 RPC interface. It can be reached via SMB/CIFS and contains several buffer overflows.

A network attacker can therefore connect to this computer and use these vulnerabilities in order to obtain system privileges.
Full bulletin, software filtering, emails, fixes, ... (Request your free trial)

This weakness alert impacts software or systems such as CA Antivirus, e-Trust Antivirus.

Our Vigil@nce team determined that the severity of this computer vulnerability note is important.

The trust level is of type confirmed by a trusted third party, with an origin of intranet client.

An attacker with a expert ability can exploit this security bulletin.

Solutions for this threat 

CA AV eTrust: patch QO89817.
The QO89817 patch is available:
Full bulletin, software filtering, emails, fixes, ... (Request your free trial)

Computer vulnerabilities tracking service 

Vigil@nce provides a network vulnerability watch. Each administrator can customize the list of products for which he wants to receive vulnerability alerts.