Signature Detail

DOS: CA eTrust Intrusion Detection Encryption Key Handling Denial of Service

This signature detects attempts to exploit a known vulnerability against CA eTrust Intrusion Detection System. A successful attack can result in a denial-of-service condition.

Extended Description

Computer Associates eTrust Intrusion Detection System is prone to a remote denial-of-service vulnerability. This issue arises because the application fails to perform sufficient boundary checks when handling user-supplied data. A successful attack can crash the administration service, denying further service to legitimate users. eTrust Intrusion Detection System 2.0, 3.0 and 3.0 SP1 are vulnerable.

Affected Products

• Computer Associates eTrust Intrusion Detection 2.0.0 SP1
• Computer Associates eTrust Intrusion Detection 3.0.0
• Computer Associates eTrust Intrusion Detection 3.0.0 SP 1

References

• BugTraq: 22743
• CVE: CVE-2007-1005
• URL: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=484
• URL: http://supportconnectw.ca.com/public/ca_common_docs/eid_secnotice.asp