Detections
Analytics
CA eTrust Intrusion Detection System Key Exchange Remote DoS
high Nessus Plugin ID 24733
Language:
Synopsis
It is possible to crash the remote IDS service.Description
The remote host is running CA eTrust Intrusion Detection System, a security solution with intrusion detection, antivirus, web filtering and session monitoring.The remote version of this software is affected by a denial of service vulnerability in the way it handles session keys. An attacker can exploit this issue to crash the remote service by sending a specially crafted administration packet.
Solution
Upgrade to version 2.0.0.41, 3.0.2.07 or 3.0.5.80.See Also
http://supportconnectw.ca.com/public/ca_common_docs/eid_secnotice.asp
Plugin Details
Severity: High
ID: 24733
File Name: etrust_dos2.nasl
Version: 1.17
Type: remote
Agent: windows
Family: Windows
Published: 2/28/2007
Updated: 7/10/2018
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.6
CVSS v2
Risk Factor: High
Base Score: 7.8
Temporal Score: 5.8
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C
Vulnerability Information
Required KB Items: eTrust/intrusion_detection_system
Exploit Ease: No known exploits are available
Vulnerability Publication Date: 2/27/2007
Reference Information
CVE: CVE-2007-1005
BID: 22743