Description
Format string vulnerability in CA Integrated Threat Management (ITM), eTrust Antivirus (eAV), and eTrust PestPatrol (ePP) r8 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a scan job with format strings in the description field.
Affected products
- Broadcom / etrust_antivirus8.0 – 8.0
- Broadcom / etrust_pestpatrol8.0 – 8.0
- Broadcom / integrated_threat_management8.0 – 8.0
References
- MISChttp://www.securityfocus.com/bid/18689
- MAILING_LISThttp://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047423.html
- MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/27374
- MISChttp://www.securityfocus.com/archive/1/438503/100/0/threaded
- MISChttp://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34325
- VENDOR_ADVISORYhttp://secunia.com/advisories/20856
- VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2006/2565
- MISChttp://www.securityfocus.com/archive/1/438582/100/0/threaded
- MISChttp://www.osvdb.org/26654
- MISChttp://securitytracker.com/id?1016391
Updated 39m ago · 8 sources