CVE-2015-3317: Buffer Overflow
CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers (aka SystemEDGE) 12.6, 12.7, 12.8, and 12.9; and CA Workload Automation AE r11, r11.3, r11.3.5, and r11.3.6 on UNIX, does not properly perform bounds checking, which allows local users to gain privileges via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-3317?
CVE-2015-3317 has a high severity rating due to potential exploitability in the affected CA software.
How do I fix CVE-2015-3317?
To fix CVE-2015-3317, users should apply the latest security patches provided by Broadcom for the affected software versions.
Which software versions are affected by CVE-2015-3317?
CVE-2015-3317 affects multiple versions of CA Client Automation, CA Network and Systems Management, and other specific CA products.
What is the impact of exploiting CVE-2015-3317?
Exploiting CVE-2015-3317 could allow unauthorized access to sensitive information or system resources.
Is there a workaround for CVE-2015-3317 if I cannot update?
While the best mitigation for CVE-2015-3317 is to update, if immediate update is not possible, restricting access to the affected systems may serve as a temporary workaround.