CVE-2011-0758: Buffer Overflow
The eCS component (ECSQdmn.exe) in CA ETrust Secure Content Manager 8.0 and CA Gateway Security 8.1 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafted request to port 1882, involving an incorrect integer calculation and a heap-based buffer overflow.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-0758?
CVE-2011-0758 is classified as a high severity vulnerability due to its potential for denial of service and arbitrary code execution.
How do I fix CVE-2011-0758?
To fix CVE-2011-0758, update to CA ETrust Secure Content Manager 8.1 or later and ensure patches are applied.
What software is affected by CVE-2011-0758?
CVE-2011-0758 affects CA ETrust Secure Content Manager 8.0 and CA Gateway Security 8.1.
What types of attacks are possible due to CVE-2011-0758?
Attackers can exploit CVE-2011-0758 to crash the service and possibly execute arbitrary code by sending crafted requests.
Is there a workaround for CVE-2011-0758?
A recommended workaround for CVE-2011-0758 is to limit access to port 1882 and implement network-level restrictions.