Security-Alerts mailing list archive (security-alerts@yandex-team.ru)
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[security-alerts] FW: [SA26155] CA Products CHM and RAR File Processing Denial of Service Vulnerabilities
>
> TITLE:
> CA Products CHM and RAR File Processing Denial of Service
> Vulnerabilities
>
> SECUNIA ADVISORY ID:
> SA26155
>
> VERIFY ADVISORY:
>
>
> CRITICAL:
> Moderately critical
>
> IMPACT:
> DoS
>
> WHERE:
> From remote
>
> SOFTWARE:
> eTrust Secure Content Manager (SCM)
>
> eTrust Intrusion Detection 3.x
>
> eTrust Intrusion Detection 2.x
>
> eTrust Internet Security Suite 2.x
>
> eTrust Internet Security Suite 1.x
>
> eTrust EZ Armor 3.x
>
> eTrust EZ Armor 2.x
>
> eTrust EZ Armor 1.x
>
> eTrust Antivirus 7.x
>
> eTrust Antivirus 6.x
>
> CA Unicenter Network and Systems Management (NSM) 3.x
>
> CA Unicenter Network and Systems Management (NSM) 11.x
>
> CA Threat Manager 8.x
>
> CA Protection Suites 3.x
>
> CA Protection Suites 2.x
>
> CA Internet Security Suite 2007 (3.x)
>
> CA Anti-Virus Gateway 7.x
>
> CA Anti-Virus for the Enterprise 8.x
>
> CA Anti-Virus 2007 (8.x)
>
> CA Anti-Spyware 8.x
>
> CA Anti-Spyware 2007
>
> BrightStor Enterprise Backup 10.x
>
> BrightStor ARCserve Backup Client Agent 11.x
>
> BrightStor ARCserve Backup 9.x
>
> BrightStor ARCserve Backup 11.x (for Windows)
>
> BrightStor ARCserve Backup 11.x (for Oracle)
>
> BrightStor ARCserve Backup 11.x (for Open Files)
>
> BrightStor ARCserve Backup 11.x (for Microsoft SQL Server)
>
> BrightStor ARCserve Backup 11.x
>
> CA Common Services (CCS) 11.x
>
> CA Anti-Virus SDK
>
>
> DESCRIPTION:
> Two vulnerabilities have been reported in various CA products, which
> can be exploited by malicious people to cause a DoS (Denial of
> Service).
>
> 1) An input validation error when processing CHM files can be
> exploited to cause an infinite loop via a specially crafted CHM file
> with an invalid 'previous listing chunk number' field.
>
> 2) An unspecified error when processing RAR archives can be exploited
> to cause the application to hang when e.g. scanning a specially
> crafted RAR archive.
>
> The vulnerabilities affect the following products:
> * CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.0,
> 7.1, r8, r8.1
> * CA Anti-Virus 2007 (v8)
> * eTrust EZ Antivirus r7, r6.1
> * CA Internet Security Suite 2007 (v3)
> * eTrust Internet Security Suite r1, r2
> * eTrust EZ Armor r1, r2, r3.x
> * CA Threat Manager for the Enterprise (formerly eTrust Integrated
> Threat Management) r8
> * CA Anti-Virus Gateway (formerly eTrust Antivirus eTrust Antivirus
> Gateway) 7.1
> * CA Protection Suites r2, r3
> * CA Secure Content Manager (formerly eTrust Secure Content Manager)
> 1.1, 8.0
> * CA Anti-Spyware for the Enterprise (Formerly eTrust PestPatrol) r8,
> 8.1
> * CA Anti-Spyware 2007
> * Unicenter Network and Systems Management (NSM) r3.0
> * Unicenter Network and Systems Management (NSM) r3.1
> * Unicenter Network and Systems Management (NSM) r11
> * Unicenter Network and Systems Management (NSM) r11.1
> * BrightStor ARCserve Backup r11.5
> * BrightStor ARCserve Backup r11.1
> * BrightStor ARCserve Backup r11 for Windows
> * BrightStor Enterprise Backup r10.5
> * BrightStor ARCserve Backup v9.01
> * BrightStor ARCserve Client agent for Windows
> * eTrust Intrusion Detection 2.0 SP1, 3.0, 3.0 SP1
> * CA Common Services (CCS) r11
> * CA Common Services (CCS) r11.1
> * CA Anti-Virus SDK (formerly eTrust Anti-Virus SDK)
>
> SOLUTION:
> Apply updates.
>
> CA Secure Content Manager 1.1:
>
> hID=QO89469
>
> CA Secure Content Manager 8.0:
>
> hID=QO87114
>
> Unicenter Network and Systems Management (NSM) r3.0:
>
> hID=QO89141
>
> Unicenter Network and Systems Management (NSM) r3.1:
>
> hID=QO89139
>
> Unicenter Network and Systems Management (NSM) r11:
>
> hID=QO89140
>
> Unicenter Network and Systems Management (NSM) r11.1:
>
> hID=QO89138&startsearch=1
>
> CA Common Services (CCS) r11:
>
> hID=QO89140
>
> CA Common Services (CCS) r11.1:
>
> hID=QO89138&startsearch=1
>
> CA Anti-Virus Gateway 7.1:
>
> hID=QO89381&startsearch=1
>
> eTrust Intrusion Detection 2.0 sp1:
>
> hID=QO89474&startsearch=1
>
> eTrust Intrusion Detection 3.0:
>
> hID=QO86925&startsearch=1
>
> eTrust Intrusion Detection 3.0 sp1:
>
> hID=QO86923&startsearch=1
>
> CA Protection Suites r2:
> Apply updates for CA Anti-Virus 7.1.
>
> BrightStor ARCserve Backup and BrightStor ARCserve Client agent for
> Windows:
> Replace the arclib.dll file with the one provided in the CA
> Anti-Virus 7.1 fix set. Please see the vendor's advisory for
> details.
>
> CA Anti-Virus 7.1 (Solaris):
>
> hID=QO86831
>
> CA Anti-Virus 7.1 (Netware):
>
> hID=QO86832
>
> CA Anti-Virus 7.1 (MacPPC):
>
> hID=QO86833
>
> CA Anti-Virus 7.1 (MacIntel):
>
> hID=QO86834
>
> CA Anti-Virus 7.1 (Linux390):
>
> hID=QO86835
>
> CA Anti-Virus 7.1 (Linux):
>
> hID=QO86836
>
> CA Anti-Virus 7.1 (HP-UX):
>
> hID=QO86837
>
> CA Anti-Virus 7.1 (Windows NT 32 bit):
>
> hID=QO86843
>
> CA Anti-Virus 7.1 (Windows NT AMD64):
>
> hID=QO86846
>
> CA Threat Manager for the Enterprise r8.1 (Linux):
>
> hID=QO86839
>
> CA Threat Manager for the Enterprise r8.1 (Mac):
>
> hID=QO86828
>
> CA Threat Manager for the Enterprise r8.1 (Solaris):
>
> hID=QO86829
>
> PROVIDED AND/OR DISCOVERED BY:
> 1) Discovered by an anonymous person and reported via iDefense Labs.
> 2) The vendor credits Titon of BastardLabs and Damian Put, reported
> via iDefense Labs.
>
> ORIGINAL ADVISORY:
> CA:
>
> arclib-secnot.asp
>
> iDefense Labs:
> .
> php?id=567
>
|
