PT-2005-1629 · Ca · Ca License Client/Server

Published 2005-03-02 · Updated 2021-04-09 · CVE-2005-0581

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CA License Client and Server version 0.1.0.15

Description The issue is related to multiple buffer overflows that allow remote attackers to execute arbitrary code. This can be achieved through various means, including certain long fields in the Checksum item in a GCR request, a long IP address, hostname, or netmask values in a GCR request, a long last parameter in a GETCONFIG packet, or long values in a request with an invalid format.

Recommendations For CA License Client and Server version 0.1.0.15, consider restricting access to the GCR request and GETCONFIG packet handling functions until a patch is available. As a temporary workaround, avoid using long values in requests to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2005-0581

Affected Products

Ca License Client/Server

References · 14

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/brightstor/license_gcr.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/license/calicserv_getconfig.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/license/calicclnt_getconfig.rb · Exploit
• 🔥 https://exploit-db.com/exploits/859 · Exploit
• 🔥 https://exploit-db.com/exploits/16745 · Exploit
• 🔥 https://exploit-db.com/exploits/16744 · Exploit
• 🔥 https://exploit-db.com/exploits/16414 · Exploit
• http://supportconnectw.ca.com/public/ca_common_docs/security_notice.asp · Vendor Advisory
• http://idefense.com/application/poi/display?id=215&type=vulnerabilities · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0581 · Security Note
• http://idefense.com/application/poi/display?id=214&type=vulnerabilities · Vendor Advisory
• http://idefense.com/application/poi/display?id=210&type=vulnerabilities · Vendor Advisory
• http://idefense.com/application/poi/display?id=213&type=vulnerabilities · Vendor Advisory
• http://marc.info/?l=bugtraq&m=110979326828704&w=2 · Note