[NT] eTrust Antivirus, Anti-Spyware and Integrated Threat Management Format String

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion

The SecuriTeam alerts list - Free, Accurate, Independent.

Get your security news from a reliable source.
http://www.securiteam.com/mailinglist.html

- - - - - - - - -



eTrust Antivirus, Anti-Spyware and Integrated Threat Management Format
String
------------------------------------------------------------------------


SUMMARY

" <http://www3.ca.com/solutions/Product.aspx?ID=156> eTrust Antivirus
helps manage your virus challenges by providing a single, comprehensive
virus management solution that eliminates virus infections, eases
administration, simplifies and automates the updating process, and more."

" <http://www.pestpatrol.com/> eTrust PestPatrol Anti-Spyware is a spyware
removal tool."

"The <http://www3.ca.com/Solutions/Product.aspx?ID=5704> CA Integrated
Threat Management r8 solution combines best-of-breed eTrust PestPatrol
Anti-Spyware Corporate Edition with eTrust Antivirus with a single
management console and increases efficiency through a common agent,
logging facility and updating tools."

Improper handling of user input allows attackers to execute arbitrary code
in CA products: eTrust Antivirus, eTrust PestPatrol and Integrated Threat
Management.

DETAILS

Vulnerable Systems:
* eTrust Antivirus version 8.0
* eTrust PestPatrol version 8.0
* Integrated Threat Management version 8.0

A format string vulnerability was discovered within eTrust Antivirus,
eTrust PestPatrol and Integrated Threat Management. The vulnerability is
due to improper processing of format strings within the scan job
description field. An attacker could create a scan job containing special
crafted format strings that could potential lead to execution of arbitrary
code, rights escalation and at a minimum denial of service.

Vendor Status:
This vulnerability is addressed by vendor in Content Update build 432.
Client GUI Vulnerability Content Update - build 432
<http://supportconnectw.ca.com/public/eitm/infodocs/etrustitmvuln-contentupdate.asp> http://supportconnectw.ca.com/public/eitm/infodocs/etrustitmvuln-contentupdate.asp

CVE Information:
<http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3223>
CVE-2006-3223

Disclosure Timeline:
05/04/2006 Reported Vulnerability to Vendor.
06/27/2006 Vulnerability fixed & public disclosure.


ADDITIONAL INFORMATION

The information has been provided by <mailto:dh@xxxxxxxxxxxxxxxxxx> Deral
Heiland.
The original article can be found at:
<http://www.layereddefense.com/ADVISORIES.html>
http://www.layereddefense.com/ADVISORIES.html
The vendor advisory can be found at:
<http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34325>
http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34325



========================================


This bulletin is sent to members of the SecuriTeam mailing list.
To unsubscribe from the list, send mail with an empty subject line and body to: list-unsubscribe@xxxxxxxxxxxxxx
In order to subscribe to the mailing list, simply forward this email to: list-subscribe@xxxxxxxxxxxxxx


====================
====================

DISCLAIMER:
The information in this bulletin is provided "AS IS" without warranty of any kind.
In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages.

Relevant Pages

  • [NT] Computer Associates Vet Antivirus Library Heap Overflow
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Computer Associates Vet library "provides anti-virus scan engine ... * CA eTrust Antivirus r6.0 all platforms including Notes/Exchange ... The vulnerability can be triggered through multiple file formats ...
    (Securiteam)
  • [Full-disclosure] Layered Defense Advisory: Format String Vuln in CA eTrust
    ... Computer Associates: Integrated Threat Management 8.0 ... A format string vulnerability was discovered within etrust Antivirus 8.0. ... About Layered Defense ...
    (Full-Disclosure)
  • [NEWS] Computer Associates AntiVirus CHM File Handling DoS Vulnerability
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Computer Associates AntiVirus CHM File Handling DoS Vulnerability ... (Previous versions of eTrust Antivirus are suspected vulnerable). ...
    (Securiteam)
  • [UNIX] Trend Micro VirusWall Buffer Overflow in VSAPI Library
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... buffer overflow vulnerability in VSAPI library allows arbitrary code ... is called "vscan" which is set suid root by default. ... permissions and thus granted all local users the privilege to execute the ...
    (Securiteam)
  • [UNIX] SCO Multiple Local Buffer Overflow
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Local exploitation of a buffer overflow vulnerability in the ppp binary, ... allows attackers to gain root privileges. ...
    (Securiteam)