Some vulnerabilities have been reported in various CA products, which can be exploited by malicious users to cause a DoS (Denial of Service) or to compromise a vulnerable system.

The vulnerabilities are caused due to boundary errors within multiple procedures in the CA Alert Notification Server service, which can be exploited to cause buffer overflows.

Successful exploitation allows execution of arbitrary code, but requires valid user credentials.

The vulnerabilities are reported in the following products:
* CA Anti-Virus for the Enterprise 7.1
* CA Threat Manager for the Enterprise (formerly eTrust Integrated Threat Management) r8
* CA Threat Manager for the Enterprise (formerly eTrust Integrated Threat Management) r8.1
* CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) r8
* CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) r8.1
* BrightStor ARCserve Backup r11.5
* BrightStor ARCserve Backup r11.1
* BrightStor ARCserve Backup r11 for Windows

Solution
Apply updates.
Further details available in Customer Area

Provided and/or discovered by
Discovered by an anonymous researcher and reported via iDefense Labs.

Changelog
Further details available in Customer Area

Original Advisory
CA:
https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=173103
http://community.ca.com/blogs/casecurityresponseblog/archive/2008/04/04/ca-alert-notification-server-multiple-vulnerabilities.aspx

iDefense Labs:
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=679

Deep Links
Links available in Customer Area