Remote DOS BrightStor ARCserve Backup for Laptops & Desktops

======= Summary ======= Today: 31 January 2007 Reference: NGS00402 Discover: Mark Litchfield Name: Remote DOS BrightStor ARCserve Backup for Laptops & Desktops r11.1 Vendor: Computer Associates Systems Affected: BrightStor ARCserve Backup for Laptops & Desktops r11.1 Risk: High Status: Published...

Computer Associates BrightStor ARCserve Backup LGSERVER.EXE stack buffer overflow

Overview Computer Associates BrightStor ARCserve Backup contains a stack buffer overflow, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Computer Associates BrightStor ARCserve Backup products come with a service called LGSERVER.EX...

CVE-2007-0449

Multiple buffer overflows in LGSERVER.EXE in CA BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.1 SP1, Mobile Backup r4.0, Desktop and Business Protection Suite r2, and Desktop Management Suite DMS r11.0 and r11.1 allow remote attackers to execute arbitrary code via crafted...

CVE-2007-0449

CVE-2007-0449 pertains to a stack/heap buffer overflow in LGSERVER.EXE of CA BrightStor ARCserve Backup products. A remote, unauthenticated attacker could send crafted packets to 1900/tcp or 2200/tcp to trigger arbitrary code execution (often with SYSTEM privileges) or cause a DoS. Affected produ...

[slackware-security] xine-lib

New xine-lib packages are available for Slackware 9.1, 10.0, 10.1, 10.2, and 11.0 to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2006-2200 Here are the details from the Slackware 11.0...

intel-race.txt

Title: Intel 2200BG 802.11 Beacon frame Kernel Memory Corruption Description: The intel wireless mini-pci driver provided with Intel 2200BG cards is vulnerable to a remote race condition memory corruption flaw. Malformed beacons frame can be used to corrupt internal kernel structures,leading to...

RHEL 4 : kernel (RHSA-2006:0689)

Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...

CentOS 4 : kernel (CESA-2006:0689)

Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...

kernel security update

CentOS Errata and Security Advisory CESA-2006:0689 Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...

CVE-2006-2200

CVE-2006-2200 describes a stack-based buffer overflow in libmms, affecting MiMMS 0.0.9 and xine-lib 1.1.0 and earlier. The vulnerability can lead to a denial of service (application crash) and potentially arbitrary code execution via the affected functions (send_command, string_utf16, get_data, g...

CVE-2002-2200

The CVE references Benjamin Lefevre Dobermann FORUM 0.5 and earlier, where remote attackers can include and execute malicious PHP files via the subpath variable in four PHP scripts: entete.php, enteteacceuil.php, index.php, and newtopic.php. This is a remote-code-injection scenario affecting that...

CVE-2002-2037

The CVE-2002-2037 entry concerns the Cisco Media Gateway Controller (MGC) in the following devices: SC2200 7.4 and earlier, VSC3000 9.1 and earlier, PGW 2200 9.1 and earlier, plus BAMS and VSPT. All run on default Solaris 2.6 installations with unnecessary services and without the latest security...

CVE-2005-2200

CVE-2005-2200 involves multiple unknown flaws in the MicroServer Web Server of Xerox WorkCentre Pro Color devices (2128, 2636, 3545) with software versions 0.001.04.044–0.001.04.504 that allow an attacker to bypass authentication. The NVD entry lists a base score of 7.5 (HIGH) with network attack...

CVE-2002-2200

Benjamin Lefevre Dobermann FORUM 0.5 and earlier allows remote attackers to remotely include and execute malicious PHP files via the "subpath" variablein 1 entete.php, 2 enteteacceuil.php, 3 index.php, or 4 newtopic.php...