CVE:CVE-2007-3825
CNNVD:CNNVD-200707-338
CA alert.exe是CA公司的一个可执行文件。
CA alert.exe在8.0.255.0之前存在安全漏洞。如果远程攻击者向该服务接口提交了超长的RPC请求的话，就可能触发这个溢出，导致以系统权限执行任意指令。可使用SMB协议到达有漏洞的代码，因此在Windows XP及之后系统上必须有效的认证凭据，而Windows 2000无须认证。
solution:Upgrade broadcom alert_notification_server to a higher version than *; Upgrade broadcom brightstor_arcserve_backup to a higher version than 9.01,11.1,11.5,and avoid the version 9.01,11.1,11.5; Upgrade broadcom brightstor_enterprise_backup to a higher version than 10.5,and avoid the version 10.5; Upgrade ca anti-virus_for_the_enterprise to a higher version than 8,and avoid the version 8; Upgrade ca brightstor_arcserve_backup to a higher version than 11,and avoid the version 11; Upgrade ca brightstor_arcserve_client to a higher version than *; Upgrade ca protection_suites to a higher version than r3,and avoid the version r3; Upgrade ca threat_manager to a higher version than 8,and avoid the version 8