PT-2004-2711 · Ca Technologies · Unicenter Tng

Dave Aitel · Published 2004-12-31 · Updated 2021-04-14 · CVE-2004-1812

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Unicenter TNG version 2.4

Description The issue is related to multiple stack-based buffer overflows in Agent Common Services, specifically in cam.exe and awservices.exe. This allows remote attackers to execute arbitrary code.

Recommendations For Unicenter TNG version 2.4, update to a version that includes the fix for the buffer overflows in cam.exe and awservices.exe. As a temporary workaround, consider restricting access to these executables to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2004-1812

Affected Products

Unicenter Tng

References · 8

• http://immunitysec.com/downloads/awservices.sxw.pdf · Vendor Advisory
• ftp://ftp.ca.com/CAproducts/unicenter/CCS31/nt/qi52764/QI52764.DB0 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-1812 · Security Note
• http://securityfocus.com/bid/9863 · Note
• http://derkeiler.com/Mailing-Lists/VulnWatch/2004-03/0008.html · Note
• http://secunia.com/advisories/11131 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15472 · Note
• http://marc.info/?l=bugtraq&m=107936784030214&w=2 · Note