
CVE-2007-2522 – CA eTrust AntiVirus Server inoweb Buffer Overflow Vulnerability
https://notcve.org/view.php?id=CVE-2007-2522
10 May 2007 — Stack-based buffer overflow in the inoweb Console Server in CA Anti-Virus for the Enterprise r8, Threat Manager r8, Anti-Spyware for the Enterprise r8, and Protection Suites r3 allows remote attackers to execute arbitrary code via a long (1) username or (2) password. Un desbordamiento de búfer en la región Stack de la memoria en el Servidor de la Consola inoweb en CA Anti-Virus para Enterprise r8, Threat Manager r8, Anti-Spyware para Enterprise r8 y Protection Suites r3 permite a los atacantes remotos ejecu... • http://lists.grok.org.uk/pipermail/full-disclosure/2007-May/063275.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVE-2006-3223
https://notcve.org/view.php?id=CVE-2006-3223
27 Jun 2006 — Format string vulnerability in CA Integrated Threat Management (ITM), eTrust Antivirus (eAV), and eTrust PestPatrol (ePP) r8 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a scan job with format strings in the description field. Vulnerabilidad de cadena de formato en CA Integrated Threat Management (ITM), eTrust Antivirus (eAV) y eTrust PestPatrol (ePP) r8 permite a atacantes provocar una denegación de servicio (caída de la aplicación) y posiblemente ejecutar c... • http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047423.html •