CVE-2006-3223 : Format string vulnerability in CA Integrated Threat Management (ITM), eTrust Antivirus (eAV), and eTrust PestPatrol (ePP

Format string vulnerability in CA Integrated Threat Management (ITM), eTrust Antivirus (eAV), and eTrust PestPatrol (ePP) r8 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a scan job with format strings in the description field.

Published 2006-06-27 21:05:00

Updated 2021-04-09 17:04:09

Source MITRE

View at NVD, CVE.org

Vulnerability category: Execute codeDenial of service

Exploit prediction scoring system (EPSS) score for CVE-2006-3223

EPSS FAQ

0.93%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 81 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2006-3223

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

Products affected by CVE-2006-3223

Broadcom » Etrust Antivirus » Version: 8.0
cpe:2.3:a:broadcom:etrust_antivirus:8.0:*:*:*:*:*:*:*
Matching versions
Broadcom » Etrust Pestpatrol » Version: 8.0
cpe:2.3:a:broadcom:etrust_pestpatrol:8.0:*:*:*:*:*:*:*
Matching versions
Broadcom » Integrated Threat Management » Version: 8.0
cpe:2.3:a:broadcom:integrated_threat_management:8.0:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2006-3223

Exploit prediction scoring system (EPSS) score for CVE-2006-3223

CVSS scores for CVE-2006-3223

References for CVE-2006-3223

Products affected by CVE-2006-3223