CVE

Id
25880  
CVE No.
CVE-2007-2523  
Status
Candidate  
Description
CA Anti-Virus for the Enterprise r8 and Threat Manager r8 before 20070510 use weak permissions (NULL security descriptor) for the Task Service shared file mapping, which allows local users to modify this mapping and gain privileges by triggering a stack-based buffer overflow in InoCore.dll before 8.0.448.0.  
Phase
Assigned (20070508)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
259858 25880 CVE-2007-2523 IDEFENSE:20070509 Computer Associates eTrust InoTask.exe Antivirus Buffer Overflow Vulnerability  View
259859 25880 CVE-2007-2523 URL:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=530  View
259860 25880 CVE-2007-2523 BUGTRAQ:20070511 Computer Associates eTrust InoTask.exe Antivirus Buffer Overflow Vulnerability  View
259861 25880 CVE-2007-2523 URL:http://www.securityfocus.com/archive/1/archive/1/468306/100/0/threaded  View
259862 25880 CVE-2007-2523 FULLDISC:20050711 [CAID 35330, 35331]: CA Anti-Virus, CA Threat Manager, and CA Anti-Spyware Console Login and File Mapping Vulnerabilities  View
259863 25880 CVE-2007-2523 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2007-May/063275.html  View
259864 25880 CVE-2007-2523 MISC:http://blog.48bits.com/?p=103  View
259865 25880 CVE-2007-2523 CONFIRM:http://supportconnectw.ca.com/public/antivirus/infodocs/caav-secnotice050807.asp  View
259866 25880 CVE-2007-2523 CERT-VN:VU#788416  View
259867 25880 CVE-2007-2523 URL:http://www.kb.cert.org/vuls/id/788416  View
259868 25880 CVE-2007-2523 BID:23906  View
259869 25880 CVE-2007-2523 URL:http://www.securityfocus.com/bid/23906  View
259870 25880 CVE-2007-2523 VUPEN:ADV-2007-1750  View
259871 25880 CVE-2007-2523 URL:http://www.vupen.com/english/advisories/2007/1750  View
259872 25880 CVE-2007-2523 OSVDB:34586  View
259873 25880 CVE-2007-2523 URL:http://www.osvdb.org/34586  View
259874 25880 CVE-2007-2523 SECTRACK:1018043  View
259875 25880 CVE-2007-2523 URL:http://www.securitytracker.com/id?1018043  View
259876 25880 CVE-2007-2523 SECUNIA:25202  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51796 JVNDB-2007-000459 Linux Kernel の PPPoE ソケットの実装におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の PPPoE ソケットの実装には、ソケットを作成し接続が確立された後に、PPPIOCGCHAN ioctl を初期化する前にソケットを解放することで、過剰なメモリ消費が発生することによるサービス運用妨害 (DoS) の脆弱性が存在します。 CVE-2007-2525 25880 4.9 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000459.html  View