CVE:CVE-2015-3317
CNNVD:CNNVD-201506-312
CA Client Automation等都是美国CA公司的产品。CA Client Automation是一套自动化和远程客户端管理工具。CA Network and Systems Management是一套企业管理系统。CA Common Services是其中的一个在Unix/Linux平台上绑定的通用服务。
多款CA产品中使用的CA Common Services中存在安全漏洞，该漏洞源于程序没有正确执行边界检查。本地攻击者可利用该漏洞获取权限。以下产品及版本受到影响：CA Client Automation r12.5 SP01版本，r12.8版本，r12.9版本；CA Network and Systems Management r11.0版本，r11.1版本，r11.2版本；CA NSM Job Management Option r11.0版本，r11.1版本，r11.2版本；CA Universal Job Management Agent，A Virtual Assurance for Infrastructure Managers 12.6版本，12.7版本，12.8版本，12.9版本；基于UNIX平台的CA Workload Automation AE r11版本，r11.3版本，r11.3.5版本，r11.3.6版本。
solution:Upgrade ca client_automation to a higher version than r12.5:sp01,r12.8,r12.9,and avoid the version r12.5:sp01,r12.8,r12.9; Upgrade ca network_and_systems_management to a higher version than r11.2,and avoid the version r11.2; Upgrade ca nsm_job_management_option to a higher version than r11.0,r11.1,r11.2,and avoid the version r11.0,r11.1,r11.2; Upgrade ca universal_job_management_agent to a higher version than -; Upgrade ca virtual_assurance_for_infrastructure_managers to a higher version than 12.6,12.7,12.8,12.9,and avoid the version 12.6,12.7,12.8,12.9; Upgrade ca workload_automation_ae to a higher version than r11,r11.3,r11.3.5,r11.3.6,and avoid the version r11,r11.3,r11.3.5,r11.3.6