Vulnerability Details : CVE-2007-1005
Heap-based buffer overflow in SW3eng.exe in the eID Engine service in CA (formerly Computer Associates) eTrust Intrusion Detection 3.0.5.57 and earlier allows remote attackers to cause a denial of service (application crash) via a long key length value to the remote administration port (9191/tcp).
Vulnerability category: OverflowDenial of service
Products affected by CVE-2007-1005
- cpe:2.3:a:ca:etrust_intrusion_detection:3.0:sp1:*:*:*:*:*:*
- cpe:2.3:a:ca:etrust_intrusion_detection:2.0:sp1:*:*:*:*:*:*
- cpe:2.3:a:broadcom:etrust_intrusion_detection:3.0:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2007-1005
20.14%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 96 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2007-1005
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.8
|
HIGH | AV:N/AC:L/Au:N/C:N/I:N/A:C |
10.0
|
6.9
|
NIST |
References for CVE-2007-1005
-
http://www.securitytracker.com/id?1017706
-
http://www.vupen.com/english/advisories/2007/0776
-
http://supportconnectw.ca.com/public/ca_common_docs/eid_secnotice.asp
Patch;Vendor Advisory
-
http://www.securityfocus.com/bid/22743
Patch
-
http://www.securityfocus.com/archive/1/461567/100/100/threaded
-
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=484
Patch;Vendor Advisory
Jump to