EUVD-2007-4986

Malware in sbrugna...

CA BrightStor ARCserve Backup Tape Engine RPC GetGroupStatus Buffer Overflow attack - Ver2 (CVE-2006-6917)

A buffer overflow vulnerability has been reported in CA BrightStor ARCserve Backup system. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CA BrightStor ARCserve Backup AddColumn() ActiveX Buffer Overflow

No description provided by source. $Id: cabrightstoraddcolumn.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and ter...

Computer Associates Products Message Engine RPC Server Multiple Buffer Overflow Vulnerabilities (1)

No description provided by source. source: http://www.securityfocus.com/bid/20365/info Multiple Computer Associates products are prone to multiple buffer-overflow vulnerabilities because the applications using an affected library fail to properly bounds-check user-supplied input before copying it...

Computer Associates Alert Notification Buffer Overflow

No description provided by source. $Id: etrustitmalert.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

CA BrightStor ARCserve Message Engine 0x72 - Remote Buffer Overflow (Metasploit)

$Id: messageengine72.rb 10551 2010-10-05 12:38:46Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CA BrightStor ARCserve Backup Message Engine Stack Overflow (CVE-2007-5327)

There exists a buffer overflow vulnerability in CA BrightStor ARCserve Backup Message Engine. The vulnerability is due to insufficient boundary checking when processing strings supplied in RPC requests. Successful exploitation of this vulnerability allows a remote unauthenticated attacker to...

CA BrightStor ARCserve Backup XDR Parsing Buffer Overflow (CVE-2008-2242)

Computer Associates BrightStor ARCserve Backup products offer data protection for distributed servers, clients, databases and applications. They provide centralized control over a series of distributed operations including Backup and Restore, Data Migration, and Threat Management. There exists a...

CA BrightStor ARCserve Backup caloggerd.exe Null Hostname Denial of Service (CVE-2007-2772)

A Null dereference vulnerability exists in the CA BrightStor ARCserve Backup caloggerd process. The vulnerability is due to insufficient data validation when parsing strings in received RPC requests. A remote unauthenticated attacker may leverage this vulnerability by sending a specially crafted...

Computer Associates Alert Notification Buffer Overflow

$Id: etrustitmalert.rb This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class...

CA BrightStor ARCserve Backup Portmapper TADDR2UADDR Denial of Service (CVE-2007-0816)

Computer Associates BrightStor ARCserve Backup products offer data protection for distributed servers, clients, databases and applications. They provide centralized control over a series of distributed operations including Backup and Restore, Data Migration, and Threat Management. There exists a...

CA BrightStor ARCServe BackUp Message Engine Remote Command Injection Vulnerability

CA BrightStor ARCServe BackUp Message Engine Remote Command Injection Vulnerability by cocoruderfrankruderathotmail.com http://ruder.cdut.net Summary: CA BrightStor ARCServe BackUp is an overall data backup solution. The RPC interface of CA BrightStor ARCServe BackUp does not handle user's input...

cabrightstor-exec.txt

CA BrightStor ARCServe BackUp Message Engine Remote Command Injection Vulnerability by cocoruderfrankruderathotmail.com http://ruder.cdut.net Summary: CA BrightStor ARCServe BackUp is an overall data backup solution. The RPC interface of CA BrightStor ARCServe BackUp does not handle user's input...

Update Protection against CA BrightStor ARCserve Backup XDR Parsing Buffer Overflow Vulnerability

A buffer overflow vulnerability has been discovered in CA BrightStor ARCserve Backup. Computer Associates CA provides a group of security and management products for enterprise as well as individual clients. CA BrightStor ARCserve Backup provides centralized control over a series of distributed...

CA BrightStor ARCserve Backup Multiple Vulnerabilities (QO92996)

According to its version, the installation of BrightStor ARCserve Backup on the remote host is affected by multiple issues : - A vulnerability in 'caloggerd' could allow an unauthenticated attacker to append data to arbitrary files on the server using log messages with directory traversal...

CVE-2008-2242

Multiple buffer overflows in xdr functions in the server in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allow remote attackers to execute arbitrary code, as demonstrated by a stack-based buffer overflow via a long parameter to the xdrrwsstring function...

Directory traversal

Directory traversal vulnerability in caloggerd in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allows remote attackers to append arbitrary data to arbitrary files via directory traversal sequences in unspecified input fields, which are used in log messages. NOTE: this can be leveraged for...

CVE-2008-2241

CA ARCserve Backup caloggerd directory traversal (CVE-2008-2241) affects ARCserve Backup r11.0, r11.1 and r11.5. The root cause is insufficient path verification when processing log messages, allowing a remote attacker to append data to arbitrary files via directory traversal sequences, potential...

CVE-2008-2242

CA BrightStor ARCserve Backup (aka BrightStor ARCserve Backup) is affected by CVE-2008-2242 via a buffer overflow in the xdr_rwsstring function used by SUN-RPC services. The vulnerability allows remote attackers to execute arbitrary code and is demonstrated by stack-based/overrun conditions when ...

ZDI-08-026: CA BrightStor ARCserve Backup Remote Buffer Overflow

ZDI-08-026: CA BrightStor ARCserve Backup Remote Buffer Overflow http://www.zerodayinitiative.com/advisories/ZDI-08-026 -- CVE ID: CVE-2008-2242 -- Affected Vendors: Computer Associates -- Affected Products: Computer Associates BrightStor ARCserve Server -- TippingPointTM IPS Customer Protection:...