CVE-2007-2522

Published: May 11, 2007Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Stack-based buffer overflow in the inoweb Console Server in CA Anti-Virus for the Enterprise r8, Threat Manager r8, Anti-Spyware for the Enterprise r8, and Protection Suites r3 allows remote attackers to execute arbitrary code via a long (1) username or (2) password.

Affected (3)

Products: Broadcom: Antispyware For The Enterprise, Etrust Integrated Threat Management, Etrust Pestpatrol

3 products

Antispyware For The Enterprise

Etrust Integrated Threat Management

Etrust Pestpatrol

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Broadcom Antispyware For The Enterprise	Version 8.0
Broadcom Etrust Integrated Threat Management	Version 8.0
Broadcom Etrust Pestpatrol	Version 8.0

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (22)

http://lists.grok.org.uk/pipermail/full-disclosure/2007-May/063275.html

Source: cve@mitre.org

http://secunia.com/advisories/25202

Source: cve@mitre.org

Vendor Advisory

http://supportconnectw.ca.com/public/antivirus/infodocs/caav-secnotice050807.asp

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/680616

Source: cve@mitre.org

US Government Resource

http://www.osvdb.org/34585

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/468304/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/23906

Source: cve@mitre.org

http://www.securitytracker.com/id?1018043

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/1750

Source: cve@mitre.org

Vendor Advisory

http://www.zerodayinitiative.com/advisories/ZDI-07-028.html

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/34204

Source: cve@mitre.org

http://lists.grok.org.uk/pipermail/full-disclosure/2007-May/063275.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/25202

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://supportconnectw.ca.com/public/antivirus/infodocs/caav-secnotice050807.asp

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kb.cert.org/vuls/id/680616

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.osvdb.org/34585

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/468304/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/23906

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1018043

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/1750

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.zerodayinitiative.com/advisories/ZDI-07-028.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/34204

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.