出处
http://www.hkcert.org/salert/chin...prod_vuln.html Computer Associates 多个产品远端缓冲区满溢漏洞多个 Computer Associates 产品都被发现存在一个漏洞，这个漏洞可以被远端攻击者利用去执行任意指令或发动阻断服务攻击。这个漏洞是由于 iGateway 元件没有适当地处理 HTTP 标头内负数值的 "Content-Length" 便送到连接埠 5250/TCP ，造成缓冲区满溢错误。这样可以被远端攻击者利用，在视窗平台以系统权限去执行任意指令，及在 UNIX 和 Linux 平台上造成 iGateway 元件失效。
影响
阻断服务
远端执行程式码
受影响之系统
iGateway 版本 4.0.051230 及之前的版本
Advantage Data Transformer (ADT) R2.2
BrightStor ARCserve Backup r11.5
BrightStor ARCserve Backup r11.1
BrightStor ARCserve Backup for Windows r11
BrightStor Enterprise Backup 10.5
BrightStor ARCserve Backup v9.01
BrightStor ARCserve Backup Laptop & Desktop r11.1
BrightStor ARCserve Backup Laptop & Desktop r11
BrightStor Process Automation Manager r11.1
BrightStor SAN Manager r11.1
BrightStor SAN Manager r11.5
BrightStor Storage Resource Manager r11.5
BrightStor Storage Resource Manager r11.1
BrightStor Storage Resource Manager 6.4
BrightStor Storage Resource Manager 6.3
BrightStor Portal 11.1
eTrust Audit 1.5 SP2 (iRecorders and ARIES)
eTrust Audit 1.5 SP3 (iRecorders and ARIES)
eTrust Audit 8.0 (iRecorders and ARIES)
eTrust Admin 8.1
eTrust Identity Minder 8.0
eTrust Secure Content Manager (SCM) R8
eTrust Integrated Threat Management (ITM) R8
eTrust Directory R8.1 (Web Components Only)
Unicenter CA Web Services Distributed Management R11
Unicenter AutoSys JM R11
Unicenter Management for WebLogic / Management for WebSphere R11
Unicenter Service Delivery R11
Unicenter Service Level Management (USLM) R11
Unicenter Application Performance Monitor R11
Unicenter Service Desk R11
Unicenter Service Desk Knowledge Tools R11
Unicenter Service Fulfillment 2.2
Unicenter Service Fulfillment R11
Unicenter Asset Portfolio Management R11
Unicenter Service Matrix Analysis R11
Unicenter Service Catalog/Fulfillment/Accounting R11
Unicenter MQ Management R11
Unicenter Application Server Managment R11
Unicenter Web Server Management R11
Unicenter Exchange Management R11KDE 版本 3.2.0 至 3.5.0
(在 AIX、HP-UX、Linux Intel、Solaris 及视窗运行的版本)
解决方案
在安装软体之前，请先浏览软体供应商之网页，以获得更多详细资料。
iGateway 升级至版本 4.0.051230：
ftp://ftp.ca.com/pub...wnloads/ 相关连结
http://www.frsirt.com/engli...s/2006/0311 http://supportconnectw.ca.com/public/ca_co...ecurity_notice.asp
