Lucene search

MitreCVE-2007-1005

HistoryMar 02, 2007 - 9:18 p.m.

CVE-2007-1005

2007-03-0221:18:00

mitre

web.nvd.nist.gov

cve-2007-1005

buffer overflow

sw3eng.exe

eid engine

ca etrust

denial of service

remote administration port

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.9

Confidence

High

EPSS

0.313

Percentile

97.0%

JSON

Heap-based buffer overflow in SW3eng.exe in the eID Engine service in CA (formerly Computer Associates) eTrust Intrusion Detection 3.0.5.57 and earlier allows remote attackers to cause a denial of service (application crash) via a long key length value to the remote administration port (9191/tcp).

Affected configurations

Nvd

Node

broadcometrust_intrusion_detectionMatch3.0

caetrust_intrusion_detectionMatch2.0sp1

caetrust_intrusion_detectionMatch3.0sp1

VendorProductVersionCPE
broadcometrust_intrusion_detection3.0cpe:2.3:a:broadcom:etrust_intrusion_detection:3.0:*:*:*:*:*:*:*
caetrust_intrusion_detection2.0cpe:2.3:a:ca:etrust_intrusion_detection:2.0:sp1:*:*:*:*:*:*
caetrust_intrusion_detection3.0cpe:2.3:a:ca:etrust_intrusion_detection:3.0:sp1:*:*:*:*:*:*

Vendor	Product	Version	CPE
broadcom	etrust_intrusion_detection	3.0	cpe:2.3:a:broadcom:etrust_intrusion_detection:3.0:::::::*
ca	etrust_intrusion_detection	2.0	cpe:2.3:a:ca:etrust_intrusion_detection:2.0:sp1::::::
ca	etrust_intrusion_detection	3.0	cpe:2.3:a:ca:etrust_intrusion_detection:3.0:sp1::::::

References

labs.idefense.com/intelligence/vulnerabilities/display.php?id=484

secunia.com/advisories/24309

supportconnectw.ca.com/public/ca_common_docs/eid_secnotice.asp

www.osvdb.org/32290

www.securityfocus.com/archive/1/461567/100/100/threaded

www.securityfocus.com/bid/22743

www.securitytracker.com/id?1017706

www.vupen.com/english/advisories/2007/0776

Social References

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.9

Confidence

High

EPSS

0.313

Percentile

97.0%

JSON

Related for CVE-2007-1005