Immunity Advisory: Computer Associates Unicenter TNG

Chris Wysopal <[email protected]>
Newsgroups gmane.comp.security.vulnerabilities.watch.announce
Message-ID <[email protected]>
Excerpt:

Remote, unauthenticated stack overflow Computer Associates Unicenter TNG
Utilities awservices.exe

Computer Associates has developed a suite of tools that help enterprises
manage the software on their machines. In doing so, they developed several
proprietary protocols, which are implemented in various daemons, listening
on TCP and UDP ports, and running as SYSTEM. These daemons are vulnerable
to classic stack overflows. In particular, Immunity reviewed cam.exe and
awservices.exe, and found many examples of exploitable problems in both.
These are considered critical problems, as they are often installed on
every machine in an enterprise.

Full Advisory:

http://www.immunitysec.com/downloads/awservices.sxw.pdf
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.