Description
Format string vulnerability in CA Integrated Threat Management (ITM), eTrust Antivirus (eAV), and eTrust PestPatrol (ePP) r8 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a scan job with format strings in the description field.
References
- 18689 vdb-entry
- 20060627 CAID 34325 - CA ITM, eAV, ePP scan job description field format string vulnerability mailing-list
- ca-scan-job-description-format-string(27374) vdb-entry
- 20060627 CAID 34325 - CA ITM, eAV, ePP scan job description field format string vulnerability mailing-list
- http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34325
- 20856 third-party-advisory
- ADV-2006-2565 vdb-entry
- 20060628 Layered Defense Advisory: Format String Vuln in CA eTrust mailing-list
- 26654 vdb-entry
- 1016391 vdb-entry