CA License Software PUTOLF Buffer Overflow (CVE-2005-0582)

Computer Associates implements a license server/client mechanism in most of its products to provide control over product licenses. The CA License package is a license management tool that allows CA customers to register and manage their product licenses on a computer network. Normally a license...

UBUNTU-CVE-2009-3941

Martin Lambers mpop before 1.0.19, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the 1 subject's Common Name or 2 Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted...

CA BrightStor ARCserve Backup Discovery Service Denial of Service (CVE-2008-1979)

Computer Associates' CA BrightStor ARCserve Backup and Business Protection Suite families of software offer data protection for distributed servers, clients, databases and applications. They provide centralized control over a series of distribution operations including Backup/Restore, Data...

CA BrightStor ARCServe Backup LGServer Authentication Username Overflow (CVE-2007-5003)

Computer Associates BrightStor ARCserve Backup for Laptops and Desktops provides backup and data recovery for remote, mobile and desktop computers. In general, a backup system is comprised of a server and multiple clients, also known as agents. The server establishes, organizes, and controls all ...

Mozilla NSS - NULL Character CA SSL Certificate Validation Security Bypass

Mozilla NSS - NULL Character CA SSL Certificate Validation Security Bypass source: https://www.securityfocus.com/bid/35888/info Mozilla Network Security Services NSS is prone to a security-bypass vulnerability because it fails to properly validate the domain name in a signed CA certificate,...

Mozilla NSS NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

No description provided by source. Private-Key: 1024 bit modulus: 00:cf:4d:17:42:00:8d:0c:41:95:31:8c:40:30:bc: 5e:42:b6:28:09:75:2f:19:61:d9:ab:4d:ec:f3:44: c4:1c:01:95:6f:27:eb:70:07:98:4f:1e:05:d0:f3: 6c:49:45:e6:de:48:7a:59:f0:c2:93:6a:37:9c:02: 72:4f:bd:14:36:26:a1:70:97:d4:fe:4b:24:e8:cd:...

Mozilla NSS NULL Character CA SSL Certificate Validation Security Bypass

Exploit for unknown platform in category remote exploits ====================================================================================== Mozilla NSS NULL Character CA SSL Certificate Validation Security Bypass Vulnerability...

KLA10094 DoS vulnerabilities in CA products

An unspecified vulnerability was found in CA products. By exploiting this vulnerability malicious users can cause denial of service or possibly execute arbitrary code. This vulnerability can be exploited from the network at a point related to arclib via a specially designed RAR archive. Original...

CA eTrust PestPatrol ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in CA eTrust PestPatrol. When sending an overly long string to the Initialize property of ppctl.dll 5.6.7.9 an attacker may be able to execute arbitrary code. Module Options msf use exploit/windows/fileformat/etrust/pestscan msf undefinedpestscan show...

CA Multiple Products 'arclib' Component DoS Vulnerability (Windows)

This host is installed with CA Multiple Products and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodcamultprdtsarclibdosvulnwin.nasl 6517 2017-07-04 13:34:20Z cfischer $ CA Multiple Products 'arclib' Component DoS Vulnerability Windows Authors: Nikita MR...

CA Multiple Products 'arclib' Component DoS Vulnerability - Windows

CA Multiple Products is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CA BrightStor ARCserve Backup Portmapper TADDR2UADDR Denial of Service (CVE-2007-0816)

Computer Associates BrightStor ARCserve Backup products offer data protection for distributed servers, clients, databases and applications. They provide centralized control over a series of distributed operations including Backup and Restore, Data Migration, and Threat Management. There exists a...

ProFTPD mod_tls模块CA SSL证书验证漏洞

BUGTRAQ ID: 36804 CVE ID: CVE-2009-3639 ProFTPD是一款开放源代码FTP服务程序。 ProFTPD的modtls模块没有正确地处理X.509证书主题通用名称（CN）字段域名中的空字符（\0），在处理包含有空字符的证书字段时错误地将空字符处理为截止字符，因此只会验证空字符前的部分。例如，对于类似于以下的名称： example.com\0.haxx.se 证书是发布给haxx.se的，但modtls模块错误的验证给example.com，这有助于攻击者通过中间人攻击执行网络钓鱼等欺骗。 必须满足以下modtls配置的情况下服务器才受这个漏洞影响：...

CA License Software GETCONFIG Buffer Overflow (CVE-2005-0581)

Computer Associates implements a license server/client mechanism in most of its products to provide control over product licenses. Normally a license server stores licences in a central location for centralized license management. This server is queried by clients for a valid a license in order t...

CA eTrust Intrusion Detection Encryption Key Handling Denial of Service (CVE-2007-1005)

CA eTrust Intrusion Detection product offers network access control and monitoring. It monitors and filters the network traffic, detects and blocks viruses or other intrusions. Moreover, it provides centralized monitoring of local and remote stations. There exists a memory corruption vulnerabilit...

CA iTechnology iGateway Service Content-Length Buffer (CVE-2005-3653)

Numerous Computer Associates CA products incorporate shared components that perform common tasks not specific to any one product. One such component is the CA iGateway service. The iGateway service is an XML-based interface that integrates with storage management applications and facilitates...

CA BrightStor ARCserve Backup Message Engine Insecure Methods (CVE-2007-5328)

CA BrightStor ARCserve Backup products offer data protection for distributed servers, clients, databases and applications. They provide centralized control over a series of distributed operations including Backup and Restore, Data Migration, and Threat Management. There exist unsecured Remote...

Memory corruption

Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise formerly eTrust Antivirus 7.1 through r8.1; Anti-Virus 2007 v8 through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 v3 through Plus 2009; and other CA products allows...

CVE-2009-3588

Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise formerly eTrust Antivirus 7.1 through r8.1; Anti-Virus 2007 v8 through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 v3 through Plus 2009; and other CA products allows...

CVE-2009-3587

Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise formerly eTrust Antivirus 7.1 through r8.1; Anti-Virus 2007 v8 through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 v3 through Plus 2009; and other CA products allows...