CVE-2007-1005: Buffer Overflow
Heap-based buffer overflow in SW3eng.exe in the eID Engine service in CA (formerly Computer Associates) eTrust Intrusion Detection 3.0.5.57 and earlier allows remote attackers to cause a denial of service (application crash) via a long key length value to the remote administration port (9191/tcp).
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-1005?
CVE-2007-1005 has a critical severity level due to its potential to cause application crashes and denial of service.
How do I fix CVE-2007-1005?
To fix CVE-2007-1005, upgrade to the latest version of CA eTrust Intrusion Detection or apply all relevant patches.
What software is affected by CVE-2007-1005?
CVE-2007-1005 affects CA eTrust Intrusion Detection version 2.0-sp1, 3.0, and 3.0-sp1.
Can CVE-2007-1005 be exploited remotely?
Yes, CVE-2007-1005 can be exploited remotely through the eID Engine service by sending a long key length value.
What are the consequences of CVE-2007-1005?
The primary consequence of CVE-2007-1005 is a denial of service resulting in an application crash.