CVE-2007-1005
published 2007-03-02CVE-2007-1005: Heap-based buffer overflow in SW3eng.exe in the eID Engine service in CA (formerly Computer Associates) eTrust Intrusion Detection 3.0.5.57 and earlier allows…
PriorityP336high7.8CVSS 2.0
AVNACLAuNCNINAC
EPSS
6.70%
93.1th percentile
Heap-based buffer overflow in SW3eng.exe in the eID Engine service in CA (formerly Computer Associates) eTrust Intrusion Detection 3.0.5.57 and earlier allows remote attackers to cause a denial of service (application crash) via a long key length value to the remote administration port (9191/tcp).
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| broadcom | etrust_intrusion_detection | — | — |
| ca | etrust_intrusion_detection | — | — |
| ca | etrust_intrusion_detection | — | — |
CVSS provenance
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
vendor_redhat4.4MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-29mq-6jwf-w4hx: Heap-based buffer overflow in SW3eng
ghsa_unreviewed·2022-05-01
CVE-2007-1005 [HIGH] GHSA-29mq-6jwf-w4hx: Heap-based buffer overflow in SW3eng
Heap-based buffer overflow in SW3eng.exe in the eID Engine service in CA (formerly Computer Associates) eTrust Intrusion Detection 3.0.5.57 and earlier allows remote attackers to cause a denial of service (application crash) via a long key length value to the remote administration port (9191/tcp).
Red Hat
sysstat insecure temporary file usage
vendor_redhat·2007-08-10·CVSS 4.4
CVE-2007-3852 [MEDIUM] CWE-377 sysstat insecure temporary file usage
sysstat insecure temporary file usage
The init script (sysstat.in) in sysstat 5.1.2 up to 7.1.6 creates /tmp/sysstat.run insecurely, which allows local users to execute arbitrary code.
Statement: This issue did not affect the versions of sysstat as shipped with Red Hat Enterprise Linux 4. This issue has been addressed in Red Hat Enterprise Linux 5 via RHSA-2011:1005 advisory.
No detection rules found.
No writeups or analysis indexed.
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=484http://secunia.com/advisories/24309http://supportconnectw.ca.com/public/ca_common_docs/eid_secnotice.asphttp://www.osvdb.org/32290http://www.securityfocus.com/archive/1/461567/100/100/threadedhttp://www.securityfocus.com/bid/22743http://www.securitytracker.com/id?1017706http://www.vupen.com/english/advisories/2007/0776http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=484http://secunia.com/advisories/24309http://supportconnectw.ca.com/public/ca_common_docs/eid_secnotice.asphttp://www.osvdb.org/32290http://www.securityfocus.com/archive/1/461567/100/100/threadedhttp://www.securityfocus.com/bid/22743http://www.securitytracker.com/id?1017706http://www.vupen.com/english/advisories/2007/0776
2007-03-02
Published