A vulnerability has been reported in CA Secure Content Manager, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to missing input validation in the eTrust Common Services Transport (ECSQdmn.exe) service when parsing requests and can be exploited to cause a heap-based buffer overflow via a specially crafted request sent to port 1882.

Successful exploitation may allow execution of arbitrary code.

The vulnerability is reported in the following products:
* CA Secure Content Manager version 8.0.
* CA Gateway Security version 8.1.

Solution
Restrict access to the affected service.

Provided and/or discovered by
Sebastian Apelt via ZDI.

Changelog
Further details available to Secunia VIM customers

Original Advisory
ZDI:
http://www.zerodayinitiative.com/advisories/ZDI-11-059/

CA:
https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID={EE6F16E1-6E05-4890-A739-2B9F745C721F}

Deep Links
Links available to Secunia VIM customers