CA Oneview Monitor DoSave.jsp Path Manipulation

Minded Security Labs: Advisory MSA100410 CA Oneview Monitor "DoSave.jsp" path manipulation Tested Versions: This advisory is intended for CA Netegrity Siteminder Policy Manager 6.x with Netegrity Oneview monitor installed. Minded Security ReferenceID: MSA100410 Credits: Discovery by Giorgio Fedon...

CA ARCserve Backup Tape Engine Denial of Service (CVE-2008-4398)

There exists a denial of service vulnerability in CA BrightStor ARCserve Backup Tape Engine service. The vulnerability is due to insufficient input validation in the ClientCreateJobHandle library function. A remote unauthenticated attacker may exploit this vulnerability by sending a crafted messa...

CA XOsoft Multiple Products xosoapapi.asmx Buffer Overflow (CVE-2010-1223)

CA ARCserve Backup products offer data protection for distributed servers, clients, databases and applications. They provide centralized control over a series of distributed operations including backup and restore, data migration, and threat management. A buffer overflow vulnerability has been...

CA Products Message Queuing Server Buffer Overflow (CVE-2007-0060)

Computer Associates CA provides numerous product suites that provide network-monitoring functionality, manage network asset discovery, software deployment, and patch management. These capabilities are contained in the CA Unicenter product suites. The numerous components that are provided, contain...

CA BrightStor ArcServe - Media Service Stack Buffer Overflow (Metasploit)

$Id: mediasrvsunrpc.rb 9583 2010-06-22 19:11:05Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

CA BrightStor Universal Agent - Remote Overflow (Metasploit)

$Id: universalagent.rb 9583 2010-06-22 19:11:05Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Computer Associates WebScan ActiveX Control Multiple RCE Vulnerabilities

CA PSFormX or WebScan ActiveX controls is prone to multiple remote code execution vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CA BrightStor ARCserve Backup - 'AddColumn()' ActiveX Buffer Overflow (Metasploit)

$Id: cabrightstoraddcolumn.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2010-2193

Multiple unspecified vulnerabilities in the CA 1 PSFormX and 2 WebScan ActiveX controls, as distributed on the CA Global Advisor web site until May 2009, allow remote attackers to execute arbitrary code via unknown vectors...

Code injection

Multiple unspecified vulnerabilities in the CA 1 PSFormX and 2 WebScan ActiveX controls, as distributed on the CA Global Advisor web site until May 2009, allow remote attackers to execute arbitrary code via unknown vectors...

CVE-2010-2193

CA PSFormX and WebScan ActiveX controls are affected by CVE-2010-2193, with multiple reported remote code execution vulnerabilities caused by input verification weaknesses. The CVE is associated with CA Global Advisor-distributed controls, which CA retired in May 2009. OpenVAS/NESSUS entries desc...

CVE-2010-2193

Multiple unspecified vulnerabilities in the CA 1 PSFormX and 2 WebScan ActiveX controls, as distributed on the CA Global Advisor web site until May 2009, allow remote attackers to execute arbitrary code via unknown vectors...

CA20100608-01: Security Notice for CA PSFormX and WebScan ActiveX Controls

-----BEGIN PGP SIGNED MESSAGE----- CA20100608-01: Security Notice for CA PSFormX and WebScan ActiveX Controls Issued: June 8, 2010 CA Technologies support is alerting users to multiple security risks with the PSFormX and WebScan ActiveX controls previously available from the CA Global Security...

CA ARCserve Backup information leak

No description provided...

CA20100603-01: Security Notice for CA ARCserve Backup

-----BEGIN PGP SIGNED MESSAGE----- CA20100603-01: Security Notice for CA ARCserve Backup Issued: June 3, 2010 CA Technologies support is alerting customers to a security risk with CA ARCserve Backup. A vulnerability exists, CVE-2010-2157, that can potentially allow a local attacker to gain...

CVE-2010-2157

Unspecified vulnerability in CA ARCserve Backup r11.5 SP4, r12.0 SP2, and r12.5 SP1 on Windows allows local users to obtain sensitive information via unknown vectors...

Code injection

Unspecified vulnerability in CA ARCserve Backup r11.5 SP4, r12.0 SP2, and r12.5 SP1 on Windows allows local users to obtain sensitive information via unknown vectors...

CVE-2010-2157

CA ARCserve Backup information disclosure (CVE-2010-2157) affects Windows: r11.5 SP4, r12.0 SP2, and r12.5 SP1. According to CA Security Notice CA20100603-01 (June 3, 2010), a vulnerability exists that could allow a local attacker to obtain sensitive information. The advisory lists affected produ...

CVE-2010-2157

Unspecified vulnerability in CA ARCserve Backup r11.5 SP4, r12.0 SP2, and r12.5 SP1 on Windows allows local users to obtain sensitive information via unknown vectors...

CA XOsoft Control Service entry_point.aspx Remote Code Execution

Added: 06/07/2010 CVE: CVE-2010-1223 BID: 39238 OSVDB: 63611 Background CA XOsoft is storage and recovery management software that includes applications for combined business continuity and disaster recovery. The CA XOsoft product family includes CA XOsoft Replication, CA XOsoft High Availability...