PT-2005-1629 · Ca · Ca License Client/Server

Publicado 2005-03-02 · Atualizado 2021-04-09 · CVE-2005-0581

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CA License Client and Server version 0.1.0.15

Description The issue is related to multiple buffer overflows that allow remote attackers to execute arbitrary code. This can be achieved through various means, including certain long fields in the Checksum item in a GCR request, a long IP address, hostname, or netmask values in a GCR request, a long last parameter in a GETCONFIG packet, or long values in a request with an invalid format.

Recommendations For CA License Client and Server version 0.1.0.15, consider restricting access to the GCR request and GETCONFIG packet handling functions until a patch is available. As a temporary workaround, avoid using long values in requests to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2005-0581

Produtos afetados

Ca License Client/Server

Referências · 14

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/brightstor/license_gcr.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/license/calicserv_getconfig.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/license/calicclnt_getconfig.rb · Exploit
• 🔥 https://exploit-db.com/exploits/859 · Exploit
• 🔥 https://exploit-db.com/exploits/16745 · Exploit
• 🔥 https://exploit-db.com/exploits/16744 · Exploit
• 🔥 https://exploit-db.com/exploits/16414 · Exploit
• http://marc.info/?l=bugtraq&m=110979326828704&w=2 · Nota
• http://supportconnectw.ca.com/public/ca_common_docs/security_notice.asp · Aviso do Fabricante
• http://idefense.com/application/poi/display?id=215&type=vulnerabilities · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-0581 · Nota de Segurança
• http://idefense.com/application/poi/display?id=214&type=vulnerabilities · Aviso do Fabricante
• http://idefense.com/application/poi/display?id=210&type=vulnerabilities · Aviso do Fabricante
• http://idefense.com/application/poi/display?id=213&type=vulnerabilities · Aviso do Fabricante