BrightStor ARCserve Backup agent for MS-SQL buffer overflow

Added: 12/20/2005 CVE: CVE-2005-1272 BID: 14453 OSVDB: 18501 Background BrightStor ARCserve Backup is a backup and recovery solution for multiple platforms. Problem A buffer overflow in the backup agent for Microsoft SQL Server allows remote attackers to execute arbitrary commands. Resolution App...

CVE-2003-1272

CVE-2003-1272 affects Winamp 3.0. The vulnerability is described as multiple buffer overflows in Winamp’s b4s file handling, specifically when a long playlist name or a long path is passed to the Playstring parameter. This can allow a remote attacker to crash the application and potentially execu...

CA BrightStor MS-SQL Server ARCserve Backup Agent Buffer Overflow (CAN-2005-1272)

...

CVE-2005-1272

CVE-2005-1272 is a stack-based buffer overflow in BrightStor ARCserve Backup Agent for Microsoft SQL Server (11.0). The vulnerability allows remote code execution by sending a long string to ports 6070 or 6050; root cause is a boundary/stack overflow in the agent. Remediation guidance present in ...

[Full-disclosure] iDEFENSE Security Advisory 08.02.05: CA BrightStor ARCserve Backup Agent for MS SQL Server Buffer Overflow

CA BrightStor ARCserve Backup Agent for MS SQL Server Buffer Overflow iDEFENSE Security Advisory 08.02.05 www.idefense.com/application/poi/display?id=287&type=vulnerabilities August 2, 2005 I. BACKGROUND BrightStor ARCserve Backup for Windows delivers backup and restore protection for all Windows...

CVE-2004-1272

CVE-2004-1272 affects elm/bolthole filter 2.6.1; a buffer overflow in save_embedded_address (filter.c) enables remote code execution via a crafted email message. Affected component: filter.c within elm/bolthole filter 2.6.1. Impact: arbitrary code execution with network access. No remediation det...

CVE-2004-1272

Buffer overflow in the saveembeddedaddress function in filter.c for elm/bolthole filter 2.6.1 allows remote attackers to execute arbitrary code via a crafted email message...

Debian DSA-092-1 : wmtv - local root exploit

Nicolas Boullis found a nasty security problem in the wmtv a dockable video4linux TV player for windowmaker package as distributed in Debian GNU/Linux 2.2. wmtv can optionally run a command if you double-click on the TV window. This command can be specified using the -e command line option...

CVE-2002-1272

Alcatel OmniSwitch 7700/7800 with AOS 5.1.1 contains a backdoor Telnet server on TCP 6778 that was left in code from development, allowing remote privileged access. Affected devices can be compromised to gain full admin control. Remediation per CERT/vendor guidance: upgrade to AOS 5.1.1.R02 or 5....

CVE-2002-1272

Alcatel OmniSwitch 7700/7800 switches running AOS 5.1.1 contains a back door telnet server that was intended for development but not removed before distribution, which allows remote attackers to gain administrative privileges...

CVE-2001-1272

CVE-2001-1272 affects wmtv 0.6.5 and earlier, where a setuid root binary can execute arbitrary commands via the -e option due to improper privilege dropping. Public references document Debian DSA-092-1 and OpenVAS/Nessus checks, indicating a local root flaw in wmtv for Debian GNU/Linux. The vulne...

CVE-2001-1272

wmtv 0.6.5 and earlier does not properly drop privileges, which allows local users to execute arbitrary commands via the -e external command option...

CVE-1999-1272

CVE-1999-1272 concerns buffer overflows in the CDROM Confidence Test program (cdrom), enabling local users to gain root privileges. The provided sources describe the vulnerability as local, with root-level impact, but no remediation or patch details are included in the documents. Potential exploi...