CVE-2007-1005

2007-03-0221:18:00

[email protected]

web.nvd.nist.gov

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

Confidence

High

EPSS

0.313

Percentile

97.0%

JSON

Heap-based buffer overflow in SW3eng.exe in the eID Engine service in CA (formerly Computer Associates) eTrust Intrusion Detection 3.0.5.57 and earlier allows remote attackers to cause a denial of service (application crash) via a long key length value to the remote administration port (9191/tcp).

Affected configurations

Nvd

Node

broadcometrust_intrusion_detectionMatch3.0

caetrust_intrusion_detectionMatch2.0sp1

caetrust_intrusion_detectionMatch3.0sp1

VendorProductVersionCPE
broadcometrust_intrusion_detection3.0cpe:2.3:a:broadcom:etrust_intrusion_detection:3.0:*:*:*:*:*:*:*
caetrust_intrusion_detection2.0cpe:2.3:a:ca:etrust_intrusion_detection:2.0:sp1:*:*:*:*:*:*
caetrust_intrusion_detection3.0cpe:2.3:a:ca:etrust_intrusion_detection:3.0:sp1:*:*:*:*:*:*

Vendor	Product	Version	CPE
broadcom	etrust_intrusion_detection	3.0	cpe:2.3:a:broadcom:etrust_intrusion_detection:3.0:::::::*
ca	etrust_intrusion_detection	2.0	cpe:2.3:a:ca:etrust_intrusion_detection:2.0:sp1::::::
ca	etrust_intrusion_detection	3.0	cpe:2.3:a:ca:etrust_intrusion_detection:3.0:sp1::::::