Secunia

Some vulnerabilities have been reported in CA eTrust Intrusion Detection, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerabilities are caused due to the CallCode (caller.dll) ActiveX control including certain insecure methods, which allow loading of arbitrary DLL files and calling the exported functions with controlled parameters. This can be exploited to e.g. execute arbitrary code when a user visits a malicious website.

The vulnerabilities affect the following products:
* eTrust Intrusion Detection 3.0
* eTrust Intrusion Detection 3.0 SP1

Solution
Apply updates.
Further details available in Customer Area

Provided and/or discovered by
Discovered by Sebastian Apelt and reported via iDefense Labs.

Original Advisory
CA:
http://supportconnectw.ca.com/public/etrust/etrust_intrusion/infodocs/eid-callervilnsecnot.asp

iDefense Labs:
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=568

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available in Customer Area