Description
Stack-based buffer overflow in a token searching function in the dtscore library in Data Transport Services in CA Software Delivery r11.2 C1, C2, C3, and SP4; Unicenter Software Delivery 4.0 C3; CA Advantage Data Transport 3.0 C1; and CA IT Client Manager r12 allows remote attackers to execute arbitrary code via crafted data.
References
- ADV-2009-2195 vdb-entry
- http://www.zerodayinitiative.com/advisories/ZDI-09-052/
- 36142 third-party-advisory
- 20090806 CA20090806-01: Security Notice for Data Transport Services mailing-list
- 1022688 vdb-entry
- 35984 vdb-entry
- ca-multiple-dtscore-bo(52322) vdb-entry
- 56834 vdb-entry
- https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=214090