Description
Heap-based buffer overflow in SW3eng.exe in the eID Engine service in CA (formerly Computer Associates) eTrust Intrusion Detection 3.0.5.57 and earlier allows remote attackers to cause a denial of service (application crash) via a long key length value to the remote administration port (9191/tcp).
References
- ADV-2007-0776 vdb-entry
- 22743 vdb-entry
- 32290 vdb-entry
- http://supportconnectw.ca.com/public/ca_common_docs/eid_secnotice.asp
- 24309 third-party-advisory
- 1017706 vdb-entry
- 20070228 [CAID 35112]: CA eTrust Intrusion Detection Denial of Service Vulnerability mailing-list
- 20070227 Computer Associates eTrust Intrusion Detection Denial of Service Vulnerability third-party-advisory