CVE-2007-3302

Severity

93%

Complexity

86%

Confidentiality

165%

The CallCode ActiveX control in caller.dll 3.0 before 20070713, and 3.0 SP1 before 3.0.5.81, in CA (formerly Computer Associates) eTrust Intrusion Detection allows remote attackers to load arbitrary DLLs on a client system, and execute code from these DLLs, via unspecified "scriptable functions."

The CallCode ActiveX control in caller.dll 3.0 before 20070713, and 3.0 SP1 before 3.0.5.81, in CA (formerly Computer Associates) eTrust Intrusion Detection allows remote attackers to load arbitrary DLLs on a client system, and execute code from these DLLs, via unspecified "scriptable functions."

CVSS 2.0 Base Score 9.3. CVSS Attack Vector: network. CVSS Attack Complexity: medium. CVSS Vector: (AV:N/AC:M/Au:N/C:C/I:C/A:C).

Overview

First reported 17 years ago

2007-07-26 00:30:00

Last updated 6 years ago

2018-10-16 16:48:00

Affected Software

Computer Associates eTrust Intrusion Detection 3.0

3.0

References

20070724 Computer Associates eTrust Intrusion Detection CallCode ActiveX Control Code Execution Vulnerability

Patch

26134

Patch, Vendor Advisory

http://supportconnectw.ca.com/public/etrust/etrust_intrusion/infodocs/eid-callervilnsecnot.asp

Patch

http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149811

20070725 [CAID 35524]: CA eTrust Intrusion Detection caller.dll Vulnerability

25050

Patch

1018447

ADV-2007-2640

ca-etrust-caller-code-execution(35565)

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.