Computer Associates BrightStor ARCserve Backup LGServer.EXE远程堆缓冲区溢出漏洞

Computer Associates BrightStor ARCserve Backup是一款企业级别的备份解决方案。 BrightStor ARCserve Backup包含的LGSERVER.EXE处理畸形报文存在问题，远程攻击者可以利用漏洞进行堆溢出攻击，可能以进程权限执行任意指令。 所有针对Mobile Backup服务进程LGSERVER.EXE监听在TCP 2200口的报文以"\x4e\x3d\x2c\x1b"序列开头，发送包含\x4e\x3d\x2c\x1b并追加65535字符的字符串可导致进程终止，可能导致任意代码执行。 Computer Associates...

Remote Unauthenticated Code Execution CA BrightStor ARCserve Backup

======= Summary ======= Today: 31 January 2007 Reference: NGS00404 Discover: Mark Litchfield Name: Remote Unauthenticated Code Execution CA BrightStor ARCserve Backup for Laptops & Desktops Vendor: Computer Associates Systems Affected: BrightStor ARCserve Backup for Laptops & Desktops r11.1 Risk:...

Remote DOS BrightStor ARCserve Backup for Laptops & Desktops

======= Summary ======= Today: 31 January 2007 Reference: NGS00402 Discover: Mark Litchfield Name: Remote DOS BrightStor ARCserve Backup for Laptops & Desktops r11.1 Vendor: Computer Associates Systems Affected: BrightStor ARCserve Backup for Laptops & Desktops r11.1 Risk: High Status: Published...

Computer Associates BrightStor ARCserve Backup LGSERVER.EXE stack buffer overflow

Overview Computer Associates BrightStor ARCserve Backup contains a stack buffer overflow, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Computer Associates BrightStor ARCserve Backup products come with a service called LGSERVER.EX...

CVE-2007-0449

CVE-2007-0449 pertains to a stack/heap buffer overflow in LGSERVER.EXE of CA BrightStor ARCserve Backup products. A remote, unauthenticated attacker could send crafted packets to 1900/tcp or 2200/tcp to trigger arbitrary code execution (often with SYSTEM privileges) or cause a DoS. Affected produ...

CVE-2007-0449

Multiple buffer overflows in LGSERVER.EXE in CA BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.1 SP1, Mobile Backup r4.0, Desktop and Business Protection Suite r2, and Desktop Management Suite DMS r11.0 and r11.1 allow remote attackers to execute arbitrary code via crafted...

CVE-2007-0449: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in LGSERVER.EXE in CA BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.1 SP1, Mobile Backup r4.0, Desktop and Business Protection Suite r2, and Desktop Management Suite DMS r11.0 and r11.1 allow remote attackers to execute arbitrary code via crafted...

[slackware-security] xine-lib

New xine-lib packages are available for Slackware 9.1, 10.0, 10.1, 10.2, and 11.0 to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2006-2200 Here are the details from the Slackware 11.0...

intel-race.txt

Title: Intel 2200BG 802.11 Beacon frame Kernel Memory Corruption Description: The intel wireless mini-pci driver provided with Intel 2200BG cards is vulnerable to a remote race condition memory corruption flaw. Malformed beacons frame can be used to corrupt internal kernel structures,leading to...

CentOS 4 : kernel (CESA-2006:0689)

Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...

RHEL 4 : kernel (RHSA-2006:0689)

Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...

kernel security update

CentOS Errata and Security Advisory CESA-2006:0689 Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...

CVE-2006-2200

CVE-2006-2200 describes a stack-based buffer overflow in libmms, affecting MiMMS 0.0.9 and xine-lib 1.1.0 and earlier. The vulnerability can lead to a denial of service (application crash) and potentially arbitrary code execution via the affected functions (send_command, string_utf16, get_data, g...

CVE-2002-2200

The CVE references Benjamin Lefevre Dobermann FORUM 0.5 and earlier, where remote attackers can include and execute malicious PHP files via the subpath variable in four PHP scripts: entete.php, enteteacceuil.php, index.php, and newtopic.php. This is a remote-code-injection scenario affecting that...

CVE-2002-2037

The CVE-2002-2037 entry concerns the Cisco Media Gateway Controller (MGC) in the following devices: SC2200 7.4 and earlier, VSC3000 9.1 and earlier, PGW 2200 9.1 and earlier, plus BAMS and VSPT. All run on default Solaris 2.6 installations with unnecessary services and without the latest security...

CVE-2002-2037: Undefined Security Weakness

The Cisco Media Gateway Controller MGC in 1 SC2200 7.4 and earlier, 2 VSC3000 9.1 and earlier, 3 PGW 2200 9.1 and earlier, 4 Billing and Management Server BAMS and 5 Voice Services Provisioning Tool VSPT runs on default installations of Solaris 2.6 with unnecessary services and without the latest...

CVE-2005-2200

CVE-2005-2200 involves multiple unknown flaws in the MicroServer Web Server of Xerox WorkCentre Pro Color devices (2128, 2636, 3545) with software versions 0.001.04.044–0.001.04.504 that allow an attacker to bypass authentication. The NVD entry lists a base score of 7.5 (HIGH) with network attack...

CVE-2002-2200

Benjamin Lefevre Dobermann FORUM 0.5 and earlier allows remote attackers to remotely include and execute malicious PHP files via the "subpath" variablein 1 entete.php, 2 enteteacceuil.php, 3 index.php, or 4 newtopic.php...