CVE-2008-2541
- State
- Published
- Severity
- Not scored
- Published
- Jun 4, 2008
- Updated
- Aug 7, 2024
- Reserved
- Jun 3, 2008
Description
Multiple stack-based buffer overflows in the HTTP Gateway Service (icihttp.exe) in CA eTrust Secure Content Manager 8.0 allow remote attackers to execute arbitrary code or cause a denial of service via long FTP responses, related to (1) the file month field in a LIST command; (2) the PASV command; and (3) directories, files, and links in a LIST command.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 20080604 TPTI-08-05: CA ETrust Secure Content Manager Gateway FTP LIST Stack Overflow Vulnerabilitymailing-list
- 30518third-party-advisory
- http://dvlabs.tippingpoint.com/advisory/TPTI-08-05
- 29528vdb-entry
- 20080604 ZDI-08-036: CA ETrust Secure Content Manager Gateway FTP LIST Stack Overflowmailing-list
- 20080604 CA Secure Content Manager HTTP Gateway Service FTP Request Vulnerabilitiesmailing-list
- ADV-2008-1741vdb-entry
- 1020167vdb-entry
- http://www.zerodayinitiative.com/advisories/ZDI-08-035/
- http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=36408
- https://support.ca.com/irj/portal/anonymous/SolutionResults?aparNo=QO99987&os=NT&actionID=3
- 20080604 ZDI-08-035: CA ETrust Secure Content Manager Gateway FTP PASV Stack Overflow Vulnerabilitymailing-list
- ca-etrust-scm-ftp-bo(42821)vdb-entry
- http://www.zerodayinitiative.com/advisories/ZDI-08-036
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.