CVE-2008-2541

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1160%

EPSS Percentile27.98th

Published2008年6月4日

Last Modified2026年4月23日

Vulnerability Description

Multiple stack-based buffer overflows in the HTTP Gateway Service (icihttp.exe) in CA eTrust Secure Content Manager 8.0 allow remote attackers to execute arbitrary code or cause a denial of service via long FTP responses, related to (1) the file month field in a LIST command; (2) the PASV command; and (3) directories, files, and links in a LIST command.

Affected Platforms (CPE)

📦

Etrust Secure Content Manager

= 8.0

References & Advisories

🔗 http://dvlabs.tippingpoint.com/advisory/TPTI-08-05

🔗 http://secunia.com/advisories/30518

🔗 http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=36408

🔗 http://www.securityfocus.com/archive/1/493082/100/0/threaded

🔗 http://www.securityfocus.com/archive/1/493084/100/0/threaded

🔗 http://www.securityfocus.com/archive/1/493087/100/0/threaded

🔗 http://www.securityfocus.com/archive/1/493124/100/0/threaded

🔗 http://www.securityfocus.com/bid/29528

Vulnerability Description

Affected Platforms (CPE)

Etrust Secure Content Manager

References & Advisories

相关漏洞威胁