CA Secure Content Manager HTTP Gateway Service FTP Request Vulnerabilities

[newsbot]

CA Secure Content Manager contains multiple vulnerabilities in the HTTP Gateway service that can allow a remote attacker to cause a denial of service condition or execute arbitrary code. CA has issued a patch to address the vulnerabilities. The vulnerabilities, CVE-2008-2541, occur due to insufficient bounds checking on certain FTP requests. An attacker can make a request that will cause the service to fail or allow the attacker to take privileged action on the system.

http://www.securiteam.com/windowsntfocus/5RP032KOKG.html