CVE-2009-2740

CA HIPS kmxIds.sys (driver) in CA Host-Based Intrusion Prevention System 8.1 is vulnerable to a DoS via malformed network packets that trigger a kernel crash. Root cause: kmxIds.sys does not properly handle certain boundary conditions during packet parsing, allowing remote attackers to crash the ...

CA Host-Based Intrusion Prevention System Client kmxIds.sys DoS (CA20090818)

The remote Windows host contains a version of the 'kmxIds.sys' driver, a component of CA Host-Based Intrusion Prevention System Client, that does not correctly handle certain malformed network packets. A remote attacker can exploit this issue to cause a kernel crash. C Tenable Network Security,...

CA20090818-02: Security Notice for CA Internet Security Suite

CA20090818-02: Security Notice for CA Internet Security Suite Issued: August 18, 2009 CA's technical support is alerting customers to a security risk with CA Internet Security Suite. A vulnerability exists that can allow a local attacker to cause a denial of service. CA has issued updates to...

CA20090818-01: Security Notice for CA Host-Based Intrusion Prevention System

CA20090818-01: Security Notice for CA Host-Based Intrusion Prevention System Issued: August 18, 2009 CA's technical support is alerting customers to a security risk with CA Host-Based Intrusion Prevention System. A vulnerability exists that can allow a remote attacker to cause a denial of service...

CVE-2009-2705

CA SiteMinder allows remote attackers to bypass cross-site scripting XSS protections for J2EE applications via a request containing non-canonical, "overlong Unicode" in place of blacklisted characters...

CVE-2009-2704

CA SiteMinder allows remote attackers to bypass cross-site scripting XSS protections for J2EE applications via a request containing a %00 encoded null byte...

Cross site scripting

CA SiteMinder allows remote attackers to bypass cross-site scripting XSS protections for J2EE applications via a request containing non-canonical, "overlong Unicode" in place of blacklisted characters...

Cross site scripting

CA SiteMinder allows remote attackers to bypass cross-site scripting XSS protections for J2EE applications via a request containing a %00 encoded null byte...

CVE-2009-2705

CVE-2009-2705 affects CA SiteMinder. The vulnerability allows remote attackers to bypass J2EE application XSS protections by submitting a request that uses non-canonical, overlong Unicode in place of blacklisted characters, enabling cross-site scripting bypasses. Documented impact is limited to b...

CVE-2009-2704

The CVE-2009-2704 issue affects CA SiteMinder and related entries, where GET parameters could bypass J2EE XSS protections due to a %00 (encoded null byte). Root cause: improper filtering of user-supplied request parameters in SiteMinder, enabling bypass of XSS protections. Documented impact is by...

CVE-2009-2704

CA SiteMinder allows remote attackers to bypass cross-site scripting XSS protections for J2EE applications via a request containing a %00 encoded null byte...

CVE-2009-2705

CA SiteMinder allows remote attackers to bypass cross-site scripting XSS protections for J2EE applications via a request containing non-canonical, "overlong Unicode" in place of blacklisted characters...

Stack overflow

Stack-based buffer overflow in a token searching function in the dtscore library in Data Transport Services in CA Software Delivery r11.2 C1, C2, C3, and SP4; Unicenter Software Delivery 4.0 C3; CA Advantage Data Transport 3.0 C1; and CA IT Client Manager r12 allows remote attackers to execute...

CVE-2009-2026

Stack-based buffer overflow in a token searching function in the dtscore library in Data Transport Services in CA Software Delivery r11.2 C1, C2, C3, and SP4; Unicenter Software Delivery 4.0 C3; CA Advantage Data Transport 3.0 C1; and CA IT Client Manager r12 allows remote attackers to execute...

CVE-2009-2026

CVE-2009-2026: Stack-based buffer overflow in the dtscore library (CA Data Transport Services) and related CA products (CA Software Delivery r11.2 C1–C3, SP4; Unicenter Software Delivery 4.0 C3; CA Advantage Data Transport 3.0 C1; CA IT Client Manager r12). The vulnerability stems from insufficie...

CVE-2009-2026

Stack-based buffer overflow in a token searching function in the dtscore library in Data Transport Services in CA Software Delivery r11.2 C1, C2, C3, and SP4; Unicenter Software Delivery 4.0 C3; CA Advantage Data Transport 3.0 C1; and CA IT Client Manager r12 allows remote attackers to execute...

ZDI-09-052: CA Unicenter Software Delivery dtscore.dll Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-052 August 7, 2009 -- Affected Vendors: Computer Associates -- Affected Products: Computer Associates Unicenter S

CA20090806-02: Security Notice for Unicenter Asset Portfolio Management, Unicenter Desktop and Server Management, Unicenter Patch Management Issued: August 6, 2009 CA's technical support is alerting customers to a security risk with Unicenter Asset Portfolio Management, Unicenter Desktop and Serv...

CA20090806-01: Security Notice for Data Transport Services

CA20090806-01: Security Notice for Data Transport Services Issued: August 6, 2009 CA's technical support is alerting customers to a security risk with Data Transport Services. A vulnerability exists that can allow a remote attacker to execute arbitrary code. CA has issued patches to address the...

CA Unicenter Software Delivery dtscore.dll Stack Overflow Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Computer Associates Unicenter Software Delivery. Authentication is not required to exploit this vulnerability. The specific flaw resides in the dtscore.dll library. The vulnerability is exposed through...

Fetchmail NULL字符CA SSL整数验证安全绕过漏洞

Bugraq ID: 35951 Fetchmail是一款功能强大的IMAP和POP客户程序。 Fetchmail不正确验证签名CA证书中包含NULL字符的域名，允许攻击者使用恶意SSL证书替换可信证书，绕过安全检测进行中间人攻击或伪造可信服务器，获得敏感信息。 Fetchmail Fetchmail 6.3.10 Fetchmail Fetchmail 6.3.9 Fetchmail Fetchmail 6.3.8 Fetchmail Fetchmail 6.3.7 Fetchmail Fetchmail 6.3.6 -rc3 Fetchmail Fetchmail 6.3.6 -rc...