Lucene search

[email protected]CVE-2006-3223

HistoryJun 27, 2006 - 9:05 p.m.

CVE-2006-3223

2006-06-2721:05:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-3223

ca integrated threat management

etrust antivirus

etrust pestpatrol

format string vulnerability

denial of service

arbitrary code execution

nvd

7.7 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

82.9%

JSON

Format string vulnerability in CA Integrated Threat Management (ITM), eTrust Antivirus (eAV), and eTrust PestPatrol (ePP) r8 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a scan job with format strings in the description field.

CPENameOperatorVersion
broadcom:etrust_antivirusbroadcom etrust antiviruseq8.0
broadcom:etrust_pestpatrolbroadcom etrust pestpatroleq8.0
broadcom:integrated_threat_managementbroadcom integrated threat managementeq8.0

CPE	Name	Operator	Version
broadcom:etrust_antivirus	broadcom etrust antivirus	eq	8.0
broadcom:etrust_pestpatrol	broadcom etrust pestpatrol	eq	8.0
broadcom:integrated_threat_management	broadcom integrated threat management	eq	8.0

References

lists.grok.org.uk/pipermail/full-disclosure/2006-June/047423.html

secunia.com/advisories/20856

securitytracker.com/id?1016391

www.osvdb.org/26654

www.securityfocus.com/archive/1/438503/100/0/threaded

www.securityfocus.com/archive/1/438582/100/0/threaded

www.securityfocus.com/bid/18689

www.vupen.com/english/advisories/2006/2565

www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34325

exchange.xforce.ibmcloud.com/vulnerabilities/27374

7.7 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

82.9%

JSON

Related for CVE-2006-3223

securityvulns3