Check Point Advisories

Update Protection against CA XOsoft Multiple Products xosoapapi.asmx Buffer Overflow

Check Point Reference:	CPAI-2010-152
Date Published:	24 Sep 2010
Severity:	Critical
Last Updated:	Friday 01 January, 2010
Source:	Secunia Advisory SA40062
Industry Reference:	CVE-2010-1223
Protection Provided by:
Who is Vulnerable?	CA XOsoft Content Distribution r12.0 CA XOsoft Content Distribution r12.5 CA XOsoft High Availability r12.0 CA XOsoft High Availability r12.5 CA XOsoft Replication r12.0 CA XOsoft Replication r12.5
Vulnerability Description	A buffer overflow vulnerability exists in CA XOsoft Multiple Products. The XOsoft software is a suite of programs which include a control system, engine, web server and a shell. The vulnerability is due to insufficient boundary checking when handling a parameter in an HTTP request. An attacker can exploit this vulnerability by sending a malicious HTTP request to a target server. Successful exploitation could result in remote code execution.
Update/Patch Avaliable	Vendor advisory.
Vulnerability Details	The vulnerability is due to insufficient boundary checking when handling a parameter in an HTTP request. Exploitation could lead to remote code execution on the affected target.