PT-2004-2711 · Ca Technologies · Unicenter Tng

Dave Aitel · Publicado 2004-12-31 · Atualizado 2021-04-14 · CVE-2004-1812

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Unicenter TNG version 2.4

Description The issue is related to multiple stack-based buffer overflows in Agent Common Services, specifically in cam.exe and awservices.exe. This allows remote attackers to execute arbitrary code.

Recommendations For Unicenter TNG version 2.4, update to a version that includes the fix for the buffer overflows in cam.exe and awservices.exe. As a temporary workaround, consider restricting access to these executables to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2004-1812

Produtos afetados

Unicenter Tng

Referências · 8

• http://immunitysec.com/downloads/awservices.sxw.pdf · Aviso do Fabricante
• http://securityfocus.com/bid/9863 · Nota
• http://derkeiler.com/Mailing-Lists/VulnWatch/2004-03/0008.html · Nota
• ftp://ftp.ca.com/CAproducts/unicenter/CCS31/nt/qi52764/QI52764.DB0 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2004-1812 · Nota de Segurança
• http://secunia.com/advisories/11131 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15472 · Nota
• http://marc.info/?l=bugtraq&m=107936784030214&w=2 · Nota