PT-2006-7100 · Ca · Ca Internet Security Suite 2007+2

Publicado 2006-12-13 · Atualizado 2021-04-09 · CVE-2006-6496

Positive Technologies (AI Summary)

CVSS v2.0

6.6

Média

Vetor base

AV:L/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CA Anti-Virus 2007 version 8.1 CA Anti-Virus for Vista Beta version 8.2 CA Internet Security Suite 2007 version 3.0

Description The issue arises from the improper handling of NULL buffers by the VetMONNT.sys and VetFDDNT.sys drivers, allowing local users with administrative access to cause a system crash via certain IOCTLs. This can lead to a denial of service.

Recommendations For CA Anti-Virus 2007 version 8.1, update the VetMONNT.sys and VetFDDNT.sys drivers to properly handle NULL buffers. For CA Anti-Virus for Vista Beta version 8.2, update the VetMONNT.sys and VetFDDNT.sys drivers to properly handle NULL buffers. For CA Internet Security Suite 2007 version 3.0, update the VetMONNT.sys and VetFDDNT.sys drivers to properly handle NULL buffers.

Correção

Identificadores relacionados

CVE-2006-6496

Produtos afetados

Ca Anti-Virus 2007

Ca Anti-Virus For Vista Beta

Ca Internet Security Suite 2007

Referências · 13

• http://osvdb.org/30845 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30909 · Nota
• http://securitytracker.com/id?1017382 · Nota
• http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34870 · Nota
• http://securityfocus.com/bid/21593 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-6496 · Nota de Segurança
• http://reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=41 · Nota
• http://crm.my-etrust.com/CIDocument.asp?KDId=2651&GUID=9FD7E4F8362C4A168D88B4FFA34DCB4C · Nota
• http://secunia.com/advisories/23378 · Nota
• http://securitytracker.com/id?1017381 · Nota
• https://t.me/cvenotify/13000 · Publicação no Telegram
• http://vupen.com/english/advisories/2006/5010 · Nota
• http://securityfocus.com/archive/1/454420/100/0/threaded · Nota