CVE-2009-0042

CVE-2009-0042 affects the Arclib library (arclib.dll) used by CA Security products. The vulnerability, described across CA Anti-Virus for Enterprise (7.1, r8, r8.1), Anti-Virus 2007 v8 and 2008, Internet Security Suite 2007 v3 and 2008, and other CA products, allows remote attackers to bypass vir...

CA20090126-01: CA Anti-Virus Engine Detection Evasion Multiple Vulnerabilities

Title: CA20090126-01: CA Anti-Virus Engine Detection Evasion Multiple Vulnerabilities CA Advisory Reference: CA20090126-01 CA Advisory Date: 2009-01-26 Reported By: Thierry Zoller and Sergio Alvarez of n.runs AG Impact: A remote attacker can evade detection. Summary: The CA Anti-Virus engine...

CA20090107-01: CA Service Metric Analysis and CA Service Level Management smmsnmpd Arbitrary Command Execution Vulnerability

Title: CA20090107-01: CA Service Metric Analysis and CA Service Level Management smmsnmpd Arbitrary Command Execution Vulnerability CA Advisory Reference: CA20090107-01 CA Advisory Date: 2009-01-07 Reported By: Michel Arboi of Tenable Network Security Impact: A remote attacker can execute arbitra...

CA Service Metric Analysis / CA Service Level Management code execution

It's possible to execute commands with snmp service...

CVE-2009-0043

The smmsnmpd service in CA Service Metric Analysis r11.0 through r11.1 SP1 and Service Level Management 3.5 does not properly restrict access, which allows remote attackers to execute arbitrary commands via unspecified vectors...

DSquare Exploit Pack: D2SEC_CA_SLM

Name| d2seccaslm ---|--- CVE| CVE-2009-0043 Exploit Pack| D2ExploitPack Description| CA Service Level Management smmsnmpd Remote Command Execution Vulnerability Notes|...

Design/Logic Flaw

The smmsnmpd service in CA Service Metric Analysis r11.0 through r11.1 SP1 and Service Level Management 3.5 does not properly restrict access, which allows remote attackers to execute arbitrary commands via unspecified vectors...

CVE-2009-0043

CVE-2009-0043 relates to CA Service Metric Analysis (SMA) r11.0–r11.1 SP1 and CA Service Level Management (SLM) 3.5, where the smmsnmpd service has insufficient access control allowing a remote attacker to execute arbitrary commands. The vulnerability stems from access restrictions not properly l...

CVE-2009-0043

The smmsnmpd service in CA Service Metric Analysis r11.0 through r11.1 SP1 and Service Level Management 3.5 does not properly restrict access, which allows remote attackers to execute arbitrary commands via unspecified vectors...

多个CA服务管理产品未明远程命令执行漏洞

BUGTRAQ ID: 33161 CVE ID：CVE-2009-0043 CNCVE ID：CNCVE-20090043 CA Service Metric Analysis和CA Service Level Management包含漏洞，允许远程攻击者执行任意命令。 问题是不充分限制对smmsnmpd服务的访问，远程攻击者可以利用漏洞以此服务上下文执行任意命令。 目前没有详细漏洞细节提供。 CA Service Metric Analysis 11.1 SP1 CA Service Metric Analysis 11.1 CA Service Metric Analysis 11...

CA Unicenter Cron Scheduler Detection

The remote service is a Cron Scheduler for CA Unicenter applications, that is used to launch programs at specified times. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid35309; scriptversion"1.11";...

Multiple CA Service Management Products - Remote Command Execution

source: https://www.securityfocus.com/bid/33161/info Multiple CA Service Management products are prone to a vulnerability that attackers can leverage to execute arbitrary commands. This issue is the result of insufficient access restrictions. Successful attacks can compromise the affected...

Multiple CA Service Management Products - Remote Command Execution

Multiple CA Service Management Products - Remote Command Execution source: https://www.securityfocus.com/bid/33161/info Multiple CA Service Management products are prone to a vulnerability that attackers can leverage to execute arbitrary commands. This issue is the result of insufficient access...

PT-2009-05: CA Internet Security Suite Denial of Service Vulnerability

Positive Technologies Research Team has discovered a denial of service DoS vulnerability in CA Internet Security Suite. The IOCTL handler in vetmonnt.sys does not properly validate buffer data associated with the Irp object, which allows local users to crash the system. Solution Install latest...

Computer Associates License Service invalid command buffer overflow

Added: 12/24/2008 CVE: CVE-2005-0581 BID: 12705 OSVDB: 14389 Background The License service comes with most Computer Associatesproducts and exchanges license information over ports 10202/tcp and 10203/tcp. Problem A buffer overflow vulnerability allows a remote attacker to execute arbitrary...

Computer Associates License Service invalid command buffer overflow

Added: 12/24/2008 CVE: CVE-2005-0581 BID: 12705 OSVDB: 14389 Background The License service comes with most Computer Associatesproducts and exchanges license information over ports 10202/tcp and 10203/tcp. Problem A buffer overflow vulnerability allows a remote attacker to execute arbitrary...

CA ARCserve Backup LDBserver Vulnerability

Title: CA ARCserve Backup LDBserver Vulnerability CA Advisory Date: 2008-12-10 Reported By: Dyon Balding of Secunia Research Impact: A remote attacker can cause a denial of service or execute arbitrary code. Summary: CA ARCserve Backup contains a vulnerability that can allow a remote attacker to...

Secunia Research: CA ARCserve Backup RPC "handle_t" Argument Vulnerability

====================================================================== Secunia Research 11/12/2008 - CA ARCserve Backup RPC "handlet" Argument Vulnerability - ====================================================================== Table of Contents Affected...

CVE-2008-5529

CA eTrust Antivirus 31.6.6086, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, a...

CVE-2008-5529

CVE-2008-5529 involves CA eTrust Antivirus 31.6.6086 on systems using Internet Explorer 6/7, where a crafted HTML document can bypass malware detection by placing an MZ header at the start and renaming the file to have no extension, .txt, or .jpg, as demonstrated by a CVE-2006-5745 exploit. The c...