Vendor Status Note JVNCIAC-R-241

CA 製品に複数の脆弱性

CA Anti-Virus for the Enteprise、CA Threat Manager などの CA 製品には、複数の脆弱性があります。

影響を受けるシステム
　- CA Anti-Virus for the Enterprise (旧 eTrust Antivirus) r8
　- CA Threat Manager for the Enterprise (旧 eTrust Integrated Threat Management) r8
　- CA Anti-Spyware for the Enterprise (旧 eTrust PestPatrol) r8
　- CA Protection Suites r3

遠隔の第三者が任意のコードを実行したり、サービス運用妨害 (DoS) 攻撃を行ったりする可能性があります。

ベンダ	リンク	更新日
CA	CA Anti-Virus for the Enterprise, CA Threat Manager, and CA Anti-Spyware for the Enterprise Console Login and File Mapping Vulnerabilities
	CA Anti-Virus for the Enterprise, CA Threat Manager for the Enterprise, CA Anti-Spyware for the Enterprise Security Notice

1. US-CERT Vulnerability Note VU#680616
   Computer Associates eTrust AntiVirus Server buffer overflow
2. US-CERT Vulnerability Note VU#788416
   Computer Associates AntiVirus InoTask buffer overflow vulnerability
3. ISS X-Force Database: ca-console-server-bo(34204)
   Multiple Computer Associates products Console Server buffer overflow
4. ISS X-Force Database: ca-inotask-bo(34205)
   Multiple Computer Associates products InoTask.exe buffer overflow