危険度: 中
  CVE識別番号: CVE-2007-3825
  情報公開日: 2 15, 2011

  概要

Multiple stack-based buffer overflows in the RPC implementation in alert.exe before 8.0.255.0 in CA (formerly Computer Associates) Alert Notification Server, as used in Threat Manager for the Enterprise, Protection Suites, certain BrightStor ARCserve products, and BrightStor Enterprise Backup, allow remote attackers to execute arbitrary code by sending certain data to unspecified RPC procedures.

  トレンドマイクロの対策

Trend Micro Deep Security shields networks through Deep Packet Inspection (DPI) rules. Trend Micro customers using OfficeScan with Intrusion Defense Firewall (IDF) plugin are also protected from attacks using these vulnerabilities. Please refer to the filter number and filter name when applying appropriate DPI and/or IDF rules.

  対応方法

  Trend Micro Deep Security DPI Rule Number: 1001041
  Trend Micro Deep Security DPI Rule Name: 1001041 - CA Alert Notification Server RPC Request Buffer Overflow

  影響を受けるソフトウェア

  • CA Alert Notification Server
  • CA Anti-Virus r8
  • CA BrightStor ARCserve Backup 11
  • CA BrightStor ARCserve Backup 11.1
  • CA BrightStor ARCserve Backup 11.5
  • CA BrightStor ARCserve Backup 9.01
  • CA BrightStor ARCserve Client
  • CA BrightStor Enterprise Backup 10.5
  • CA Protection Suites r3
  • CA Threat Manager r8