CVE-2009-2026: Ca Advantage Data Transport

High severity, CVSS 10.0. EPSS: 7.7% chance of exploitation in the next 30 days.

Stack-based buffer overflow in a token searching function in the dtscore library in Data Transport Services in CA Software Delivery r11.2 C1, C2, C3, and SP4; Unicenter Software Delivery 4.0 C3; CA Advantage Data Transport 3.0 C1; and CA IT Client Manager r12 allows remote attackers to execute arbitrary code via crafted data.

Affected products

• Ca Advantage Data Transport: version 3.0 only
• Ca It Client Manager: version r12 only
• Ca Software Delivery: version r11 only
• Ca Unicenter Software Delivery: version 4.0 only

Published 2009-08-10. Last modified 2026-06-16.