medium4.6Public exploit code
CVE-2005-0581
Multiple buffer overflows in Computer Associates (CA) License Client and Server 0.1.0.15 allow remote attackers to execute arbitrary code via (1) certain long …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Computer Associates License Server - GETCONFIG Overflow (Metasploit)2010-09-20 · remote · windows · Verified
- Computer Associates License Client - GETCONFIG Overflow (Metasploit)2010-09-20 · remote · windows · Verified
- CA BrightStor ARCserve License Service - 'GCR NETWORK' Remote Buffer Overflow (Metasploit)2010-11-03 · remote · windows · Verified
- CA License Server - 'GETCONFIG' Remote Buffer Overflow2005-03-06 · remote · windows · Verified
Impact
Multiple buffer overflows in Computer Associates (CA) License Client and Server 0.1.0.15 allow remote attackers to execute arbitrary code via (1) certain long fields in the Checksum item in a GCR request, (2) a long IP address, hostname, or netmask values in a GCR request, (3) a long last parameter in a GETCONFIG packet, or (4) long values in a request with an invalid format.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Broadcom | License Software | Version 0.1.0.15 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=110979326828704&w=2
- http://supportconnectw.ca.com/public/ca_common_docs/security_notice.asp
- http://www.idefense.com/application/poi/display?id=210&type=vulnerabilities
- http://www.idefense.com/application/poi/display?id=213&type=vulnerabilities
- http://www.idefense.com/application/poi/display?id=214&type=vulnerabilities
- http://www.idefense.com/application/poi/display?id=215&type=vulnerabilities
- http://marc.info/?l=bugtraq&m=110979326828704&w=2
- http://supportconnectw.ca.com/public/ca_common_docs/security_notice.asp
- http://www.idefense.com/application/poi/display?id=210&type=vulnerabilities
- http://www.idefense.com/application/poi/display?id=213&type=vulnerabilities
- http://www.idefense.com/application/poi/display?id=214&type=vulnerabilities
- http://www.idefense.com/application/poi/display?id=215&type=vulnerabilities