iDefense Security Advisory 04.03.08: Computer Associates Alert Notification Service Multiple RPC Buffer Overflow Vulnerabilities

iDefense Security Advisory 04.03.08 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 03, 2008 I. BACKGROUND Computer Associates Alert Notification Server is used by several CA products, including eTrust Integrated Threat Management, to provide notifications to console users. II...

iDefense Security Advisory 07.17.07: Computer Associates Alert Notification Server Multiple Buffer Overflow Vulnerabilities

Computer Associates Alert Notification Server Multiple Buffer Overflow Vulnerabilities iDefense Security Advisory 07.17.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jul 17, 2007 I. BACKGROUND Computer Associates Alert Notification Server is used by several CA products, including eTru...

Computer Associates Alert Notification Server buffer overflow

Added: 07/19/2007 CVE: CVE-2007-3825 BID: 24947 OSVDB: 36096 Background The Alert Notification Server is included with multiple Computer Associates products to provide notifications to console users. Problem The Alert Notification Server is affected by buffer overflow vulnerabilities in multiple...

CA eTrust Integrated Threat Management multiple buffer overflow

Buffer overflows in Alert Notification Server RPC interface...

Computer Associates Alert Notification Server buffer overflow

Added: 07/19/2007 CVE: CVE-2007-3825 BID: 24947 OSVDB: 36096 Background The Alert Notification Server is included with multiple Computer Associates products to provide notifications to console users. Problem The Alert Notification Server is affected by buffer overflow vulnerabilities in multiple...

Computer Associates Alert Notification Server buffer overflow

Added: 07/19/2007 CVE: CVE-2007-3825 BID: 24947 OSVDB: 36096 Background The Alert Notification Server is included with multiple Computer Associates products to provide notifications to console users. Problem The Alert Notification Server is affected by buffer overflow vulnerabilities in multiple...

Stack overflow

Multiple stack-based buffer overflows in the RPC implementation in alert.exe before 8.0.255.0 in CA formerly Computer Associates Alert Notification Server, as used in Threat Manager for the Enterprise, Protection Suites, certain BrightStor ARCserve products, and BrightStor Enterprise Backup, allo...

CVE-2007-3825

CA Alert Notification Server (alert.exe) is affected by multiple stack-based buffer overflows in its RPC handling, prior to version 8.0.255.0, used across Threat Manager for the Enterprise, Protection Suites, BrightStor ARCserve Backup, and BrightStor Enterprise Backup. The vulnerabilities allow ...

CVE-2007-3825

Multiple stack-based buffer overflows in the RPC implementation in alert.exe before 8.0.255.0 in CA formerly Computer Associates Alert Notification Server, as used in Threat Manager for the Enterprise, Protection Suites, certain BrightStor ARCserve products, and BrightStor Enterprise Backup, allo...

Sun Java System Web Proxy Server fails to properly process malformed packets

Overview A vulnerability in the way Sun Java System Web Proxy Server processes malformed packets may allow execution of arbitrary code. Description SOCKS is a network protocol that provides a framework that allows client-server applications to securely use network firewall services. A vulnerabili...

CVE-2006-3454

Multiple format string vulnerabilities in Symantec AntiVirus Corporate Edition 8.1 up to 10.0, and Client Security 1.x up to 3.0, allow local users to execute arbitrary code via format strings in 1 Tamper Protection and 2 Virus Alert Notification messages...

CVE-2006-3454

Multiple format string vulnerabilities in Symantec AntiVirus Corporate Edition 8.1 up to 10.0, and Client Security 1.x up to 3.0, allow local users to execute arbitrary code via format strings in 1 Tamper Protection and 2 Virus Alert Notification messages...

Symantec AntiVirus Corporate Edition Elevation of Privilege

SUMMARY An elevation of privilege vulnerability in Symantec Client Security and Symantec AntiVirus Corporate Edition could potentially allow a local attacker to execute code with elevated privileges on the target machine. Risk Impact Medium Remote Access | No ---|--- Local Access | Yes...

[LSD] Security vulnerability in SUN's Java Virtual Machine implementation

Hello, We have found a security vulnerability in the SUN's implementation of the Java Virtual Machine, which affects the following SDK and JRE releases: - SDK and JRE 1.4.103 and earlier - SDK and JRE 1.3.108 and earlier - SDK and JRE 1.2.2015 and earlier. SUN was informed about this issue on Jun...