CVE:CVE-2009-2026
CNNVD:CNNVD-200908-067
CA Software Delivery(之前名为Unicenter Software Delivery)用于在各种业务环境中向笔记本、桌面、服务器等交付关键软件。
Software Delivery用于实现数据传输服务的dtscore库中的一个令牌搜索例程会将用户提供的数据拷贝到固定大小的栈缓冲区。如果用户向该服务的监听端口提交了恶意请求的话，就可能触发栈溢出，导致执行任意指令。
solution:Upgrade ca advantage_data_transport to a higher version than 3.0:c1,and avoid the version 3.0:c1; Upgrade ca it_client_manager to a higher version than r12,and avoid the version r12; Upgrade ca software_delivery to a higher version than r11:c1,r11:c2,r11:c3,r11:sp4,and avoid the version r11:c1,r11:c2,r11:c3,r11:sp4; Upgrade ca unicenter_software_delivery to a higher version than 4.0:c3,and avoid the version 4.0:c3