CVE-2009-2026: Buffer Overflow

Published Aug 10, 2009

Updated

Stack-based buffer overflow in a token searching function in the dtscore library in Data Transport Services in CA Software Delivery r11.2 C1, C2, C3, and SP4; Unicenter Software Delivery 4.0 C3; CA Advantage Data Transport 3.0 C1; and CA IT Client Manager r12 allows remote attackers to execute arbitrary code via crafted data.

Affected Software

7 affected components

CA Advantage Data Transport=3.0-c1

CA Software Delivery=r11-c1

CA Unicenter Software Delivery=4.0-c3

CA Software Delivery=r11-sp4

CA IT Client Manager=r12

CA Software Delivery=r11-c2

CA Software Delivery=r11-c3

Remediation

Patch Available

http://www.vupen.com/english/advisories/2009/2195

Event History

Aug 10, 2009

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2009-2026?

CVE-2009-2026 is rated as a critical vulnerability due to its potential for remote code execution.

How do I fix CVE-2009-2026?

To fix CVE-2009-2026, upgrade to the latest version of the affected software as recommended by the vendor.

What software is affected by CVE-2009-2026?

CVE-2009-2026 affects various versions of CA Software Delivery, CA Advantage Data Transport, and CA IT Client Manager.

What type of vulnerability is CVE-2009-2026?

CVE-2009-2026 is classified as a stack-based buffer overflow vulnerability.

Can CVE-2009-2026 be exploited remotely?

Yes, CVE-2009-2026 can be exploited remotely, allowing attackers to execute arbitrary code.