出處
http://www.hkcert.org/salert/chin...prod_vuln.html Computer Associates 多個產品遠端緩衝區滿溢漏洞多個 Computer Associates 產品都被發現存在一個漏洞，這個漏洞可以被遠端攻擊者利用去執行任意指令或發動阻斷服務攻擊。這個漏洞是由於 iGateway 元件沒有適當地處理 HTTP 標頭內負數值的 "Content-Length" 便送到連接埠 5250/TCP ，造成緩衝區滿溢錯誤。這樣可以被遠端攻擊者利用，在視窗平台以系統權限去執行任意指令，及在 UNIX 和 Linux 平台上造成 iGateway 元件失效。
影響
阻斷服務
遠端執行程式碼
受影響之系統
iGateway 版本 4.0.051230 及之前的版本
Advantage Data Transformer (ADT) R2.2
BrightStor ARCserve Backup r11.5
BrightStor ARCserve Backup r11.1
BrightStor ARCserve Backup for Windows r11
BrightStor Enterprise Backup 10.5
BrightStor ARCserve Backup v9.01
BrightStor ARCserve Backup Laptop & Desktop r11.1
BrightStor ARCserve Backup Laptop & Desktop r11
BrightStor Process Automation Manager r11.1
BrightStor SAN Manager r11.1
BrightStor SAN Manager r11.5
BrightStor Storage Resource Manager r11.5
BrightStor Storage Resource Manager r11.1
BrightStor Storage Resource Manager 6.4
BrightStor Storage Resource Manager 6.3
BrightStor Portal 11.1
eTrust Audit 1.5 SP2 (iRecorders and ARIES)
eTrust Audit 1.5 SP3 (iRecorders and ARIES)
eTrust Audit 8.0 (iRecorders and ARIES)
eTrust Admin 8.1
eTrust Identity Minder 8.0
eTrust Secure Content Manager (SCM) R8
eTrust Integrated Threat Management (ITM) R8
eTrust Directory R8.1 (Web Components Only)
Unicenter CA Web Services Distributed Management R11
Unicenter AutoSys JM R11
Unicenter Management for WebLogic / Management for WebSphere R11
Unicenter Service Delivery R11
Unicenter Service Level Management (USLM) R11
Unicenter Application Performance Monitor R11
Unicenter Service Desk R11
Unicenter Service Desk Knowledge Tools R11
Unicenter Service Fulfillment 2.2
Unicenter Service Fulfillment R11
Unicenter Asset Portfolio Management R11
Unicenter Service Matrix Analysis R11
Unicenter Service Catalog/Fulfillment/Accounting R11
Unicenter MQ Management R11
Unicenter Application Server Managment R11
Unicenter Web Server Management R11
Unicenter Exchange Management R11KDE 版本 3.2.0 至 3.5.0
(在 AIX、HP-UX、Linux Intel、Solaris 及視窗運行的版本)
解決方案
在安裝軟體之前，請先瀏覽軟體供應商之網頁，以獲得更多詳細資料。
iGateway 升級至版本 4.0.051230：
ftp://ftp.ca.com/pub...wnloads/ 相關連結
http://www.frsirt.com/engli...s/2006/0311 http://supportconnectw.ca.com/public/ca_co...ecurity_notice.asp
