CVE-2008-2241

Directory traversal vulnerability in caloggerd in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allows remote attackers to append arbitrary data to arbitrary files via directory traversal sequences in unspecified input fields, which are used in log messages. NOTE: this can be leveraged for...

Directory traversal

Directory traversal vulnerability in caloggerd in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allows remote attackers to append arbitrary data to arbitrary files via directory traversal sequences in unspecified input fields, which are used in log messages. NOTE: this can be leveraged for...

CVE-2008-2241

CA ARCserve Backup caloggerd directory traversal (CVE-2008-2241) affects ARCserve Backup r11.0, r11.1 and r11.5. The root cause is insufficient path verification when processing log messages, allowing a remote attacker to append data to arbitrary files via directory traversal sequences, potential...

CVE-2008-2242

CA BrightStor ARCserve Backup (aka BrightStor ARCserve Backup) is affected by CVE-2008-2242 via a buffer overflow in the xdr_rwsstring function used by SUN-RPC services. The vulnerability allows remote attackers to execute arbitrary code and is demonstrated by stack-based/overrun conditions when ...

CA ARCserve Backup caloggerd and xdr Functions Vulnerabilities

Title: CA ARCserve Backup caloggerd and xdr Functions Vulnerabilities CA Advisory Date: 2008-05-19 Reported By: An anonymous researcher working with the iDefense VCP Damian Put working with ZDI/TippingPoint Impact: A remote attacker can cause a denial of service or execute arbitrary code. Summary...

ZDI-08-026: CA BrightStor ARCserve Backup Remote Buffer Overflow

ZDI-08-026: CA BrightStor ARCserve Backup Remote Buffer Overflow http://www.zerodayinitiative.com/advisories/ZDI-08-026 -- CVE ID: CVE-2008-2242 -- Affected Vendors: Computer Associates -- Affected Products: Computer Associates BrightStor ARCserve Server -- TippingPointTM IPS Customer Protection:...

CA BrightStor ARCserve Backup multiple security vulnerabilities

caloggerd directory traversal. Buffer overflow in multiple xdr functions...

CA BrightStor ARCserve Backup caloggerd Arbitrary File Writing Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Computer Associates ARCserve Backup. Authentication is not required exploit this vulnerability. The specific flaw exists within the caloggerd log daemon during the processing of log messages that...

Update Protection against CA ARCserve Backup for Laptops and Desktops NetBackup Arbitrary File Upload Vulnerability

A security bypass vulnerability has been reported in CA ARCserve Backup for Laptops and Desktops. Computer Associates CA BrightStor ARCserve Backup for Laptops and Desktops provides backup and data recovery for remote, mobile and desktop computers. A remote attacker may exploit this vulnerability...

CA Unicenter DSM ITRM Legends ActiveX integer overflow

Overview The CA Unicenter DSM ITRM Legends ActiveX control contains an integer overflow vulnerability, which can allow a remote attacker to execute arbitrary code on a vulnerable system. Description CA Unicenter DSM ITRM Legends is an ActiveX control that is included with multiple CA products. Th...

CA ARCserve Backup for Laptops and Desktops LGServer service code execution

Added: 05/07/2008 CVE: CVE-2008-1328 BID: 28616 OSVDB: 44320 Background BrightStor ARCserve Backup for Laptops and Desktops is an automated backup solution optimized for low-bandwidth, intermittent network connections. Problem A buffer overflow vulnerability in BrightStor ARCserve Backup for...

CA ARCserve Backup for Laptops and Desktops LGServer service code execution

Added: 05/07/2008 CVE: CVE-2008-1328 BID: 28616 OSVDB: 44320 Background BrightStor ARCserve Backup for Laptops and Desktops is an automated backup solution optimized for low-bandwidth, intermittent network connections. Problem A buffer overflow vulnerability in BrightStor ARCserve Backup for...

CA ARCserve Backup for Laptops and Desktops LGServer service code execution

Added: 05/07/2008 CVE: CVE-2008-1328 BID: 28616 OSVDB: 44320 Background BrightStor ARCserve Backup for Laptops and Desktops is an automated backup solution optimized for low-bandwidth, intermittent network connections. Problem A buffer overflow vulnerability in BrightStor ARCserve Backup for...

CVE-2008-1984

The eTrust Common Services Transport Daemon eCSqdmn in CA Secure Content Manager 8.0.28000.511 and earlier allows remote attackers to cause a denial of service crash or CPU consumption via a malformed packet to TCP port 1882...

Buffer overflow

The Discovery Service casdscvc in CA ARCserve Backup 12.0.5454.0 and earlier allows remote attackers to cause a denial of service crash via a packet with a large integer value used in an increment to TCP port 41523, which triggers a buffer over-read...

CVE-2008-1979

The Discovery Service casdscvc in CA ARCserve Backup 12.0.5454.0 and earlier allows remote attackers to cause a denial of service crash via a packet with a large integer value used in an increment to TCP port 41523, which triggers a buffer over-read...

Code injection

The eTrust Common Services Transport Daemon eCSqdmn in CA Secure Content Manager 8.0.28000.511 and earlier allows remote attackers to cause a denial of service crash or CPU consumption via a malformed packet to TCP port 1882...

CVE-2008-1984

The CVE-2008-1984 entry concerns CA eTrust Secure Content Manager (eCSqdmn, Transport Daemon) affected in 8.0.28000.511 and earlier. The flaw lets remote attackers cause a denial of service (crash or high CPU usage) by sending a malformed packet to TCP port 1882. The underlying root cause is rela...

CVE-2008-1979

The CVE-2008-1979 issue affects CA ARCserve Backup Discovery Service (casdscvc) in CA ARCserve Backup 12.0.5454.0 and earlier. A remote attacker can trigger a denial-of-service (crash) by sending a crafted packet that uses a large integer in an increment to TCP port 41523, resulting in a buffer o...

CVE-2008-1984

The eTrust Common Services Transport Daemon eCSqdmn in CA Secure Content Manager 8.0.28000.511 and earlier allows remote attackers to cause a denial of service crash or CPU consumption via a malformed packet to TCP port 1882...