Vulnerability-Lookup

CERTA-2008-AVI-170

Vulnerability from certfr_avis - Published: - Updated:

Une vulnérabilité dans un contrôle ActiveX contenu dans divers produits Computer Associates permet l'exécution de code arbitraire à distance.

Description

Une vulnérabilité, de type débordement de mémoire, a été découverte dans le contrôle ActiveX DSM ListCtrl installé dans de nombreux produits Computer Associates. L'exploitation de cette vulnérabilité permet l'exécution de code arbitraire à distance.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
N/A	N/A	CA Desktop Management Suite r11.2a ;
N/A	N/A	Unicenter Software Delivery r11.2 C1 ;
N/A	N/A	Unicenter Remote Control r11.2a ;
N/A	N/A	CA Desktop Management Suite r11.1 (GA, a, C1) ;
N/A	N/A	Unicenter Asset Management r11.2 C1 ;
N/A	N/A	Unicenter Software Delivery r11.2 ;
N/A	N/A	Unicenter Asset Management r11.2a ;
N/A	N/A	BrightStor ARCServe Backup for Laptops and Desktops r11.5 ;
N/A	N/A	Unicenter Desktop Management Bundle r11.2a ;
N/A	N/A	Unicenter Desktop Management Bundle r11.2 ;
N/A	N/A	Unicenter Asset Management r11.1 (GA, a, C1) ;
N/A	N/A	CA Desktop Management Suite r11.2 C1 ;
N/A	N/A	Unicenter Desktop Management Bundle r11.1 (GA, a, C1) ;
N/A	N/A	Unicenter Remote Control r11.2 ;
N/A	N/A	Unicenter Remote Control r11.2 C1 ;
N/A	N/A	Unicenter Software Delivery r11.2a ;
N/A	N/A	Unicenter Asset Management r11.2 ;
N/A	N/A	Unicenter Software Delivery r11.1 (GA, a, C1) ;
N/A	N/A	Unicenter Remote Control r11.1 (GA, a, C1).
N/A	N/A	CA Desktop Management Suite r11.2 ;
N/A	N/A	Unicenter Desktop Management Bundle r11.2 C1 ;

References

Title

Publication Time

Tags

Bulletin de sécurité CA du 27 mars 2008

None

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "CA Desktop Management Suite r11.2a ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Unicenter Software Delivery r11.2 C1 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Unicenter Remote Control r11.2a ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "CA Desktop Management Suite r11.1 (GA, a, C1) ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Unicenter Asset Management r11.2 C1 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Unicenter Software Delivery r11.2 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Unicenter Asset Management r11.2a ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "BrightStor ARCServe Backup for Laptops and Desktops r11.5 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Unicenter Desktop Management Bundle r11.2a ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Unicenter Desktop Management Bundle r11.2 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Unicenter Asset Management r11.1 (GA, a, C1) ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "CA Desktop Management Suite r11.2 C1 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Unicenter Desktop Management Bundle r11.1 (GA, a, C1) ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Unicenter Remote Control r11.2 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Unicenter Remote Control r11.2 C1 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Unicenter Software Delivery r11.2a ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Unicenter Asset Management r11.2 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Unicenter Software Delivery r11.1 (GA, a, C1) ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Unicenter Remote Control r11.1 (GA, a, C1).",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "CA Desktop Management Suite r11.2 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Unicenter Desktop Management Bundle r11.2 C1 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nUne vuln\u00e9rabilit\u00e9, de type d\u00e9bordement de m\u00e9moire, a \u00e9t\u00e9 d\u00e9couverte dans\nle contr\u00f4le ActiveX DSM ListCtrl install\u00e9 dans de nombreux produits\nComputer Associates. L\u0027exploitation de cette vuln\u00e9rabilit\u00e9 permet\nl\u0027ex\u00e9cution de code arbitraire \u00e0 distance.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2008-1472",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-1472"
    }
  ],
  "links": [],
  "reference": "CERTA-2008-AVI-170",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2008-04-02T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 dans un contr\u00f4le \u003cspan class=\"textit\"\u003eActiveX\u003c/span\u003e\ncontenu dans divers produits \u003cspan class=\"textit\"\u003eComputer\nAssociates\u003c/span\u003e permet l\u0027ex\u00e9cution de code arbitraire \u00e0 distance.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans des produits Computer Associates",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 CA du 27 mars 2008",
      "url": "https://support.ca.com/irj/portal/anonymous/phpdocs?filePath=0/common/DSM_ListCtr_secnot.html"
    }
  ]
}

CVE-2008-1472 (GCVE-0-2008-1472)

Vulnerability from cvelistv5 – Published: 2008-03-24 22:00 – Updated: 2024-08-07 08:24

Summary

Stack-based buffer overflow in the ListCtrl ActiveX Control (ListCtrl.ocx), as used in multiple CA products including BrightStor ARCserve Backup R11.5, Desktop Management Suite r11.1 through r11.2, and Unicenter products r11.1 through r11.2, allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a long argument to the AddColumn method.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

9 references

URL	Tags
http://www.securityfocus.com/bid/28268	vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2008/0902…	vdb-entryx_refsource_VUPEN
http://secunia.com/advisories/29408	third-party-advisoryx_refsource_SECUNIA
https://www.exploit-db.com/exploits/5264	exploitx_refsource_EXPLOIT-DB
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.securityfocus.com/archive/1/489893/100…	mailing-listx_refsource_BUGTRAQ
http://www.securitytracker.com/id?1019617	vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/archive/1/490263/100…	mailing-listx_refsource_BUGTRAQ
http://community.ca.com/blogs/casecurityresponseb…	x_refsource_CONFIRM

Date Public

2008-03-16 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T08:24:42.123Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "28268",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/28268"
          },
          {
            "name": "ADV-2008-0902",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/0902/references"
          },
          {
            "name": "29408",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29408"
          },
          {
            "name": "5264",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/5264"
          },
          {
            "name": "ca-arcserve-listctrl-bo(41225)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41225"
          },
          {
            "name": "20080320 Note about recently publicized CA BrightStor ActiveX exploit code",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/489893/100/0/threaded"
          },
          {
            "name": "1019617",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1019617"
          },
          {
            "name": "20080328 CA Multiple Products DSM ListCtrl ActiveX Control Buffer Overflow Vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/490263/100/0/threaded"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2008/3/28.aspx"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-03-16T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Stack-based buffer overflow in the ListCtrl ActiveX Control (ListCtrl.ocx), as used in multiple CA products including BrightStor ARCserve Backup R11.5, Desktop Management Suite r11.1 through r11.2, and Unicenter products r11.1 through r11.2, allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a long argument to the AddColumn method."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-11T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "28268",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/28268"
        },
        {
          "name": "ADV-2008-0902",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/0902/references"
        },
        {
          "name": "29408",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29408"
        },
        {
          "name": "5264",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/5264"
        },
        {
          "name": "ca-arcserve-listctrl-bo(41225)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41225"
        },
        {
          "name": "20080320 Note about recently publicized CA BrightStor ActiveX exploit code",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/489893/100/0/threaded"
        },
        {
          "name": "1019617",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1019617"
        },
        {
          "name": "20080328 CA Multiple Products DSM ListCtrl ActiveX Control Buffer Overflow Vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/490263/100/0/threaded"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2008/3/28.aspx"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-1472",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Stack-based buffer overflow in the ListCtrl ActiveX Control (ListCtrl.ocx), as used in multiple CA products including BrightStor ARCserve Backup R11.5, Desktop Management Suite r11.1 through r11.2, and Unicenter products r11.1 through r11.2, allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a long argument to the AddColumn method."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "28268",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/28268"
            },
            {
              "name": "ADV-2008-0902",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/0902/references"
            },
            {
              "name": "29408",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29408"
            },
            {
              "name": "5264",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/5264"
            },
            {
              "name": "ca-arcserve-listctrl-bo(41225)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41225"
            },
            {
              "name": "20080320 Note about recently publicized CA BrightStor ActiveX exploit code",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/489893/100/0/threaded"
            },
            {
              "name": "1019617",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1019617"
            },
            {
              "name": "20080328 CA Multiple Products DSM ListCtrl ActiveX Control Buffer Overflow Vulnerability",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/490263/100/0/threaded"
            },
            {
              "name": "http://community.ca.com/blogs/casecurityresponseblog/archive/2008/3/28.aspx",
              "refsource": "CONFIRM",
              "url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2008/3/28.aspx"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-1472",
    "datePublished": "2008-03-24T22:00:00.000Z",
    "dateReserved": "2008-03-24T00:00:00.000Z",
    "dateUpdated": "2024-08-07T08:24:42.123Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.