10

CVE-2009-2026

Stack-based buffer overflow in a token searching function in the dtscore library in Data Transport Services in CA Software Delivery r11.2 C1, C2, C3, and SP4; Unicenter Software Delivery 4.0 C3; CA Advantage Data Transport 3.0 C1; and CA IT Client Manager r12 allows remote attackers to execute arbitrary code via crafted data.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ca ≫ Advantage Data Transport Version 3.0 Update c1
Ca ≫ It Client Manager Version r12
Ca ≫ Software Delivery Version r11 Update c1
Ca ≫ Software Delivery Version r11 Update c2
Ca ≫ Software Delivery Version r11 Update c3
Ca ≫ Software Delivery Version r11 Update sp4
Ca ≫ Unicenter Software Delivery Version 4.0 Update c3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 7.73% 0.939
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://osvdb.org/56834
http://secunia.com/advisories/36142
Vendor Advisory
http://securitytracker.com/id?1022688
http://www.securityfocus.com/archive/1/505557/100/0/threaded
http://www.securityfocus.com/bid/35984
http://www.vupen.com/english/advisories/2009/2195
Patch
Vendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-09-052/
https://exchange.xforce.ibmcloud.com/vulnerabilities/52322
https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=214090
Vendor Advisory