CVE-2009-3588

CVE-2009-3588 (and 3587) describe a DoS vulnerability in CA’s arclib component used by CA Anti-Virus for Enterprise and related CA products. A crafted RAR archive can trigger stack corruption (CVE-3588) and heap corruption (CVE-3587); CVE-3587 also notes possible arbitrary-code execution. Affecte...

CVE-2009-3587

CA ARclib DoS vulnerabilities (CVE-2009-3587/3588) affect CA Anti-Virus for the Enterprise and related CA products; exploitation via crafted RAR archives can trigger heap or stack corruption and may lead to denial of service and possibly arbitrary code execution. Affected products listed include ...

CVE-2009-3587

Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise formerly eTrust Antivirus 7.1 through r8.1; Anti-Virus 2007 v8 through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 v3 through Plus 2009; and other CA products allows...

CA Anti-Virus multiple security vulnerabilities

Multiple vulnerabilities on RAR archives parsing...

CA20091008-01: Security Notice for CA Anti-Virus Engine

CA20091008-01: Security Notice for CA Anti-Virus Engine Issued: October 8, 2009 CA's support is alerting customers to multiple security risks associated with CA Anti-Virus Engine. Vulnerabilities exist in the arclib component that can allow a remote attacker to cause a denial of service, or to...

Google Chrome CA SSL Certificate Security Bypass Vulnerability - Oct09

This host is installed with Google Chrome Web Browser and is prone to Security Bypass vulnerability. OpenVAS Vulnerability Test $Id: gbgooglechromesecbypassvulnoct09.nasl 4869 2016-12-29 11:01:45Z teissa $ Google Chrome CA SSL Certificate Security Bypass Vulnerability - Oct09 Authors: Sharath S...

SuSE 11 Security Update : Mozilla Firefox (SAT Patch Number 1199)

The Mozilla NSS security framework was updated to version 3.12.3.1. - Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services NSS before 3.12.3, as used in Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, and AOL Instant Messenger AIM, allows remote SSL...

Fedora Core 10 FEDORA-2009-8794 (neon)

The remote host is missing an update to neon announced via advisory FEDORA-2009-8794. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Mandrake Security Advisory MDVSA-2009:210 (gnutls)

The remote host is missing an update to gnutls announced via advisory MDVSA-2009:210. OpenVAS Vulnerability Test $Id: mdksa2009210.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:210 gnutls Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

[PT-2009-05] CA Internet Security Suite Denial of Service Vulnerability

---------------------------------------------------------------------- PT-2009-05 Positive Technologies Security Advisory CA Internet Security Suite Denial of Service Vulnerability ---------------------------------------------------------------------- --- Affected Software CA Internet Security...

CA Internet Security Suite DoS

Crash on IOCTL processing...

CA Internet Security Suite vetmonnt.sys驱动本地拒绝服务漏洞

BUGTRAQ ID: 36077 CVECAN ID: CVE-2009-0682 CA Internet Security Suite是为家庭用户提供的综合网络安全解决方案。 Internet Security Suite所使用的vetmonnt.sys驱动没有正确地验证IOCTL调用，本地攻击者可以通过提交恶意的IOCTL请求导致内核崩溃。 Computer Associates Internet Security Suite r5 Computer Associates Internet Security Suite r4 Computer Associates Internet...

CA SiteMinder GET请求多个跨站脚本漏洞

BUGTRAQ ID: 36086,36088 CVECAN ID: CVE-2009-2704,CVE-2009-2705 CA SiteMinder是一个集中的Web访问管理系统，允许对Web应用和门户执行用户认证、单点登录、认证管理等功能。 SiteMinder没有正确地过滤用户在GET请求中所提交的参数。如果远程攻击者在提交的请求中包含有%00（编码的空字节）或非规范的超长Unicode的话，就可以绕过对J2EE应用的跨站脚本保护措施。 Computer Associates SiteMinder 厂商补丁： Computer Associates...

CVE-2009-2740

kmxIds.sys before 7.3.1.18 in CA Host-Based Intrusion Prevention System HIPS 8.1 allows remote attackers to cause a denial of service system crash via a malformed packet...

Design/Logic Flaw

kmxIds.sys before 7.3.1.18 in CA Host-Based Intrusion Prevention System HIPS 8.1 allows remote attackers to cause a denial of service system crash via a malformed packet...

Code injection

vetmonnt.sys in CA Internet Security Suite r3, vetmonnt.sys before 9.0.0.184 in Internet Security Suite r4, and vetmonnt.sys before 10.0.0.217 in Internet Security Suite r5 do not properly verify IOCTL calls, which allows local users to cause a denial of service system crash via a crafted call...

CVE-2009-0682

vetmonnt.sys in CA Internet Security Suite r3, vetmonnt.sys before 9.0.0.184 in Internet Security Suite r4, and vetmonnt.sys before 10.0.0.217 in Internet Security Suite r5 do not properly verify IOCTL calls, which allows local users to cause a denial of service system crash via a crafted call...

CVE-2009-0682

vetmonnt.sys in CA Internet Security Suite r3, vetmonnt.sys before 9.0.0.184 in Internet Security Suite r4, and vetmonnt.sys before 10.0.0.217 in Internet Security Suite r5 do not properly verify IOCTL calls, which allows local users to cause a denial of service system crash via a crafted call...

CVE-2009-0682

CA Internet Security Suite vulnerable to local denial-of-service via IOCTL handling in vetmonnt.sys. Affects CA Internet Security Suite r3, and r4 up to 9.0.0.184, and r5 up to 10.0.0.217. The IOCTL verifier did not properly validate the Irp-buffer, enabling a crafted IOCTL to crash the system. P...

CVE-2009-2740

kmxIds.sys before 7.3.1.18 in CA Host-Based Intrusion Prevention System HIPS 8.1 allows remote attackers to cause a denial of service system crash via a malformed packet...