CVE-2007-5331

CVE-2007-5331 affects CA BrightStor ARCserve Backup and BrightStor Enterprise Backup. The vulnerability lies in queue.dll used by the message queuing service (LQserver.exe), where a malformed ONRPC request for operation 0x76 can cause memory corruption in lqserver/media services, enabling remote ...

CVE-2007-5328

The Message Engine RPC service in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows attackers to execute arbitrary code by using certain "insecure method calls" to modify the file system and registry, aka "Privileged function exposure."...

CA BrightStor ARCServe BackUp multiple security vulnerabilities

TCP/6504 RPC-based requests processing multiple buffer overflows...

CA BrightStor ARCserve Backup Multiple Remote Vulnerabilities (QO91094)

According to its version, the installation of BrightStor ARCserve Backup on the remote host is affected by multiple vulnerabilities affecting multiple components. A remote attacker can leverage these issues to execute arbitrary code, cause a denial of service, or access privileged functions witho...

EEYE: CA BrightStor ArcServe Backup Server Arbitrary Pointer Dereference

CA BrightStor ARCserve Backup Server Arbitrary Pointer Dereference Release Date: October 11, 2007 Date Reported: June 18, 2007 Severity: High Remote Code Execution Vendor: Computer Associates CA Systems Affected: BrightStor ARCserve Backup 11.5 BrightStor ARCserve Backup 11.1 BrightStor ARCserve...

[ELEYTT] 10PAZDZIERNIK2007

Eleytt Research www.eleytt.com Overview: ==================== Michal Bucko, Eleytt, www.eleytt.com/michal.bucko Tomasz Polis, www.eleytt.com Credit: ==================== Michal Bucko, Eleytt, www.eleytt.com/michal.bucko Vulnerability Table =================== 1. CA Erwin Datatype Standards File...

CA BrightStor ARCServe BackUp Message Engine Remote Stack Overflow Vulnerability

hi full-disclosure, CA BrightStor ARCServe BackUp Message Engine Remote Stack Overflow Vulnerability by cocoruder of Fortinet Security Research Team http://ruder.cdut.net Summary: A remote stack overflow vulnerability exist in the RPC interface of CA BrightStor ARCServe BackUp. An arbitrary...

CA eTrust Intrusion Detection CallCode ActiveX Control Code Execution (CVE-2007-3302)

A remote code execution vulnerability has been reported in CA eTrust Intrusion Detection. CA eTrust Intrusion Detection is a network intrusion management and prevention system, that includes real-time session monitoring and Internet web filtering capabilities. A remote attacker could exploit this...

TPTI-07-17: CA BrightStor Hierarchical Storage Manager SQL Injection Vulnerabilities

TPTI-07-17: CA BrightStor Hierarchical Storage Manager SQL Injection Vulnerabilities http://dvlabs.tippingpoint.com/advisory/TPTI-07-17.html October 2, 2007 -- CVE ID: CVE-2007-5084 -- Affected Vendor: Computer Associates -- Affected Products: BrightStor Hierarchical Storage Manager r11.5 --...

CA BrightStor HSM Engine Detection (UDP)

The remote service is a BrightStor HSM Engine, the engine component of BrightStor Hierarchical Storage Manager, which is used to manage files on the remote host as part of an enterprise-grade tiered storage solution. C Tenable Network Security, Inc. include"compat.inc"; if description...

Command injection

Multiple command handlers in CA Computer Associates BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 do not verify if a peer is authenticated, which allows remote attackers to add and delete users, and start client restores...

Directory traversal

Directory traversal vulnerability in rxRPC.dll in CA Computer Associates BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allows remote attackers to upload and overwrite arbitrary files via a ..\ dot dot backslash sequence in the destination filename argument to sub-functio...

CVE-2007-5004

Integer overflow in CA Computer Associates BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allows remote attackers to execute arbitrary code via a long username and a certain "useless" password...

CVE-2007-5003

Multiple stack-based buffer overflows in CA Computer Associates BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allow remote attackers to execute arbitrary code via a long 1 username or 2 password to the rxrLogin command in rxRPC.dll, or a long 3 username argument to the...

CVE-2007-5005

Directory traversal vulnerability in rxRPC.dll in CA Computer Associates BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allows remote attackers to upload and overwrite arbitrary files via a ..\ dot dot backslash sequence in the destination filename argument to sub-functio...

DSquare Exploit Pack: D2SEC_CABLD

Name| d2seccabld ---|--- CVE| CVE-2007-5006 Exploit Pack| D2ExploitPack Description| CA BrightStor ARCserve Backup for Laptops & Desktops r11.5 LGServer Stack Overflow Notes|...

CVE-2007-5003

CVE-2007-5003 concerns multiple stack-based buffer overflows in CA BrightStor ARCserve Backup for Laptops and Desktops, affecting r11.0 through r11.5. The vulnerability arises in the rxRPC.dll routines rxrLogin (long username and long password) and GetUserInfo (long username), allowing remote att...

CVE-2007-5005

Directory traversal vulnerability in rxRPC.dll in CA Computer Associates BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allows remote attackers to upload and overwrite arbitrary files via a ..\ dot dot backslash sequence in the destination filename argument to sub-functio...

CVE-2007-5082

CVE-2007-5082 describes multiple stack-based buffer overflows in Computer Associates’ BrightStor HSM prior to r11.6, affecting the CsAgent service over TCP. A remote attacker can cause arbitrary code execution by sending crafted CsAgent commands with certain opcodes, due to missing validation of ...

CVE-2007-5006

Multiple command handlers in CA Computer Associates BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 do not verify if a peer is authenticated, which allows remote attackers to add and delete users, and start client restores...