PT-2008-3505 · Ca · Ca Secure Content Manager

Published 2008-04-27 · Updated 2021-04-09 · CVE-2008-1984

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions CA Secure Content Manager versions 8.0.28000.511 and earlier

Description The issue allows remote attackers to cause a denial of service, resulting in a crash or CPU consumption, by sending a malformed packet to TCP port 1882.

Recommendations For CA Secure Content Manager versions 8.0.28000.511 and earlier, consider restricting access to TCP port 1882 to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2008-1984

Affected Products

Ca Secure Content Manager

References · 7

• 🔥 http://aluigi.altervista.org/adv/ecsqdamn-adv.txt · Exploit
• 🔥 http://securityfocus.com/bid/28888 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-1984 · Security Note
• http://secunia.com/advisories/29895 · Vendor Advisory
• http://securitytracker.com/id?1019913 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41890 · Note
• http://vupen.com/english/advisories/2008/1355/references · Note