Computer Associates Unicenter Remote Control DM Primer Remote Denial of Service Vulnerability
BID:16276
Info
Computer Associates Unicenter Remote Control DM Primer Remote Denial of Service Vulnerability
| Bugtraq ID: | 16276 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2006-0307 CVE-2006-0306 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 17 2006 12:00AM |
| Updated: | Jun 27 2007 07:38PM |
| Credit: | Discovered by Karma <[email protected]>. |
| Vulnerable: |
Computer Associates Unicenter Remote Control German GA 6.0 (Build 6.0.74) Computer Associates Unicenter Remote Control German 6.0 SP1 (Build 6.0.77) Computer Associates Unicenter Remote Control French GA 6.0 (Build 6.0.74) Computer Associates Unicenter Remote Control French 6.0 SP1 (Build 6.0.77) Computer Associates Unicenter Remote Control English QO48974 6.0 (Build 6.0.74) Computer Associates Unicenter Remote Control English GA 6.0 (6.0.56.3) Computer Associates Unicenter Remote Control English 6.0 SP1 (Build 6.0.77) Computer Associates Unicenter Remote Control 6.0 SP1 Computer Associates Unicenter Remote Control 6.0 Computer Associates Unicenter Remote Control 5.2 |
| Not Vulnerable: | |
Discussion
Computer Associates Unicenter Remote Control DM Primer Remote Denial of Service Vulnerability
Computer Associates Unicenter Remote Control DM Primer is prone to a denial-of-service vulnerability.
Attackers may trigger a denial of service due to a hang. Note that an attacker may easily source IP addresses because the service uses UDP.
Computer Associates Unicenter Remote Control DM Primer is prone to a denial-of-service vulnerability.
Attackers may trigger a denial of service due to a hang. Note that an attacker may easily source IP addresses because the service uses UDP.
Exploit / POC
Computer Associates Unicenter Remote Control DM Primer Remote Denial of Service Vulnerability
An exploit is not required.
Proof of concept:
hping -2 -s 1025 -p 5727 -d 4097 -a 1.1.1.1
An exploit is not required.
Proof of concept:
hping -2 -s 1025 -p 5727 -d 4097 -a 1.1.1.1
Solution / Fix
Computer Associates Unicenter Remote Control DM Primer Remote Denial of Service Vulnerability
Solution:
Reports indicate that a fix is available from the following location:
http://supportconnectw.ca.com/
Symantec could not confirm this.
Solution:
Reports indicate that a fix is available from the following location:
http://supportconnectw.ca.com/
Symantec could not confirm this.
References
Computer Associates Unicenter Remote Control DM Primer Remote Denial of Service Vulnerability
References:
References:
- CA Homepage (Computer Associates)
- Error Handling in DM Primer (Karma)
- Unicenter Asset Management Product Page (Computer Associates)