Preemptive Protection against CA eTrust Secure Content Manager Gateway FTP PASV Stack Overflow Vulnerability
| Check Point Reference: | CPAI-2008-090 | |
| Date Published: | ||
| Severity: | ||
| Last Updated: | ||
| Source: | Secunia Advisory: SA30518 | |
| Industry Reference(s): | CVE-2008-2541 | |
| Protection Provided by: |
VPN-1
|
|
| Who is Vulnerable? CA eTrust Secure Content Manager 8 | ||
| Vulnerability Description A buffer overflow vulnerability was discovered in CA eTrust Secure Content Manager. CA eTrust Secure Content Manager (SCM) is a gateway product for Windows platform that secures, monitors, filters and blocks potential threats from messaging and Web traffic. It provides protection against malware, spam, phishing, P2P file sharing and prevents access to known spyware sites. A remote attacker can exploit this vulnerability to execute arbitrary code on a vulnerable system. |
||
|
Vulnerability Details The vulnerability is due to a boundary error in CA eTrust Secure Content Manager that fails to sufficiently check certain FTP responses. A remote attacker can exploit this issue by sending a specially crafted FTP PASV response to the target server. Successful exploitation of this vulnerability may allow the attacker to execute arbitrary code on the target system. |
Protection Overview
SmartDefense performs a mandatory protection against the "FTP Bounce" attack, verifying the destination of the FTP PORT command. Users are protected against this vulnerability by default. No update is required to address this vulnerability except for IPS-1.
To configure the defense, select your product from the list below and follow the related protection steps.
To configure the defense, select your product from the list below and follow the related protection steps.