Buffer overflow in Ca Client Automation
CVE-2015-3317
CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers (aka SystemEDGE) 12.6, 12.7, 12.8, and 12.9; and CA Workload Automation AE r11, r11.3, r11.3.5, and r11.3.6 on UNIX, does not properly perform bounds checking, which allows local users to gain privileges via unspecified vectors.
Vulnerability class: Buffer Overflow
EPSS: 0.004 (30.5th percentile) — read the EPSS interpretation.
Affected products
- Ca Client_automation — versions r12.5, r12.8, r12.9
- Ca Network_and_systems_management — versions r11.2
- Ca Nsm_job_management_option — versions r11.0, r11.1, r11.2
- Ca Universal_job_management_agent
- Ca Virtual_assurance_for_infrastructure_managers — versions 12.6, 12.7, 12.8
- Ca Workload_automation_ae — versions r11, r11.3, r11.3.5
- Hp Hp-ux
- Ibm Aix
- Linux Linux_kernel
- Oracle Solaris
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2015-3317?
- CVE-2015-3317 is a vulnerability in Ca Client Automation, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2015-06-17.
- Is CVE-2015-3317 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.