CVE-2006-3223 - Vulnerability Details - OpenCVE

Format string vulnerability in CA Integrated Threat Management (ITM), eTrust Antivirus (eAV), and eTrust PestPatrol (ePP) r8 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a scan job with format strings in the description field.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.0171.

Key SSVC decision points have not yet been added.

Vendors	Products
Broadcom	Etrust Antivirus Etrust Pestpatrol Integrated Threat Management

Configuration 1 [-]

OR	cpe:2.3:a:broadcom:etrust_antivirus:8.0:::::::*
	cpe:2.3:a:broadcom:etrust_pestpatrol:8.0:::::::*
	cpe:2.3:a:broadcom:integrated_threat_management:8.0:::::::*

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2006-3220	Format string vulnerability in CA Integrated Threat Management (ITM), eTrust Antivirus (eAV), and eTrust PestPatrol (ePP) r8 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a scan job with format strings in the description field.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047423.html
http://secunia.com/advisories/20856
http://securitytracker.com/id?1016391
http://www.osvdb.org/26654
http://www.securityfocus.com/archive/1/438503/100/0/threaded
http://www.securityfocus.com/archive/1/438582/100/0/threaded
http://www.securityfocus.com/bid/18689
http://www.vupen.com/english/advisories/2006/2565
http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34325
https://exchange.xforce.ibmcloud.com/vulnerabilities/27374

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2006-06-27T21:00:00

Updated: 2024-08-07T18:23:21.175Z

Reserved: 2006-06-25T00:00:00

Link: CVE-2006-3223

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2006-06-27T21:05:00.000

Modified: 2025-04-03T01:03:51.193

Link: CVE-2006-3223

Redhat

No data.

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-06-27T00:00:00", "descriptions": [{"lang": "en", "value": "Format string vulnerability in CA Integrated Threat Management (ITM), eTrust Antivirus (eAV), and eTrust PestPatrol (ePP) r8 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a scan job with format strings in the description field."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-18T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "18689", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/18689"}, {"name": "20060627 CAID 34325 - CA ITM, eAV, ePP scan job description field format string vulnerability", "tags": ["mailing-list", "x_refsource_FULLDISC"], "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047423.html"}, {"name": "ca-scan-job-description-format-string(27374)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27374"}, {"name": "20060627 CAID 34325 - CA ITM, eAV, ePP scan job description field format string vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/438503/100/0/threaded"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34325"}, {"name": "20856", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/20856"}, {"name": "ADV-2006-2565", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2006/2565"}, {"name": "20060628 Layered Defense Advisory: Format String Vuln in CA eTrust", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/438582/100/0/threaded"}, {"name": "26654", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/26654"}, {"name": "1016391", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1016391"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-3223", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Format string vulnerability in CA Integrated Threat Management (ITM), eTrust Antivirus (eAV), and eTrust PestPatrol (ePP) r8 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a scan job with format strings in the description field."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "18689", "refsource": "BID", "url": "http://www.securityfocus.com/bid/18689"}, {"name": "20060627 CAID 34325 - CA ITM, eAV, ePP scan job description field format string vulnerability", "refsource": "FULLDISC", "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047423.html"}, {"name": "ca-scan-job-description-format-string(27374)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27374"}, {"name": "20060627 CAID 34325 - CA ITM, eAV, ePP scan job description field format string vulnerability", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/438503/100/0/threaded"}, {"name": "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34325", "refsource": "CONFIRM", "url": "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34325"}, {"name": "20856", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/20856"}, {"name": "ADV-2006-2565", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2006/2565"}, {"name": "20060628 Layered Defense Advisory: Format String Vuln in CA eTrust", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/438582/100/0/threaded"}, {"name": "26654", "refsource": "OSVDB", "url": "http://www.osvdb.org/26654"}, {"name": "1016391", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1016391"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T18:23:21.175Z"}, "title": "CVE Program Container", "references": [{"name": "18689", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/18689"}, {"name": "20060627 CAID 34325 - CA ITM, eAV, ePP scan job description field format string vulnerability", "tags": ["mailing-list", "x_refsource_FULLDISC", "x_transferred"], "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047423.html"}, {"name": "ca-scan-job-description-format-string(27374)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27374"}, {"name": "20060627 CAID 34325 - CA ITM, eAV, ePP scan job description field format string vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/438503/100/0/threaded"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34325"}, {"name": "20856", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/20856"}, {"name": "ADV-2006-2565", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2006/2565"}, {"name": "20060628 Layered Defense Advisory: Format String Vuln in CA eTrust", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/438582/100/0/threaded"}, {"name": "26654", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/26654"}, {"name": "1016391", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1016391"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-3223", "datePublished": "2006-06-27T21:00:00", "dateReserved": "2006-06-25T00:00:00", "dateUpdated": "2024-08-07T18:23:21.175Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:broadcom:etrust_antivirus:8.0:*:*:*:*:*:*:*", "matchCriteriaId": "71D3160D-539D-4E26-8B0B-C372315EE700", "vulnerable": true}, {"criteria": "cpe:2.3:a:broadcom:etrust_pestpatrol:8.0:*:*:*:*:*:*:*", "matchCriteriaId": "D5A40FA2-B23F-43B0-84B2-77E45F75ED57", "vulnerable": true}, {"criteria": "cpe:2.3:a:broadcom:integrated_threat_management:8.0:*:*:*:*:*:*:*", "matchCriteriaId": "C167CC34-95AE-45CD-A1CE-64FF738DE25E", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Format string vulnerability in CA Integrated Threat Management (ITM), eTrust Antivirus (eAV), and eTrust PestPatrol (ePP) r8 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a scan job with format strings in the description field."}, {"lang": "es", "value": "Vulnerabilidad de cadena de formato en CA Integrated Threat Management (ITM), eTrust Antivirus (eAV) y eTrust PestPatrol (ePP) r8 permite a atacantes provocar una denegaci\u00f3n de servicio (ca\u00edda de la aplicaci\u00f3n) y posiblemente ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de un tarea de escaneado con un cadena de formato en el campo \"description\" (descripci\u00f3n)."}], "id": "CVE-2006-3223", "lastModified": "2025-04-03T01:03:51.193", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": true, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2006-06-27T21:05:00.000", "references": [{"source": "cve@mitre.org", "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047423.html"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/20856"}, {"source": "cve@mitre.org", "url": "http://securitytracker.com/id?1016391"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/26654"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/438503/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/438582/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/18689"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2006/2565"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34325"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27374"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047423.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/20856"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securitytracker.com/id?1016391"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/26654"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/438503/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/438582/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/18689"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2006/2565"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34325"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27374"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}