CVE-2007-2522

Summary (CVE-2007-2522): A stack-based buffer overflow in the CA Console Server component (InoWeb.exe) of multiple CA products (CA Anti-Virus for the Enterprise, CA Threat Manager, CA Anti-Spyware for the Enterprise, CA Protection Suites) allows remote attackers to execute arbitrary code by sendi...

CVE-2007-2523

CA Anti-Virus for the Enterprise r8 and Threat Manager r8 before 20070510 use weak permissions NULL security descriptor for the Task Service shared file mapping, which allows local users to modify this mapping and gain privileges by triggering a stack-based buffer overflow in InoCore.dll before...

CVE-2007-2522

Stack-based buffer overflow in the inoweb Console Server in CA Anti-Virus for the Enterprise r8, Threat Manager r8, Anti-Spyware for the Enterprise r8, and Protection Suites r3 allows remote attackers to execute arbitrary code via a long 1 username or 2 password...

eTrust Antivirus Agent r8 Local Privilege Elevation Exploit

Exploit for unknown platform in category local exploits =========================================================== eTrust Antivirus Agent r8 Local Privilege Elevation Exploit =========================================================== /...

CA多个eTrust产品控制台服务器及InoCore.dll远程栈缓冲区溢出漏洞

eTrust是CA推出的系列杀毒产品，现在更名为Anti-Virus for the Enterprise、Threat Manager、Anti-Spyware for the Enterprise等产品。 eTrust Antivirus的任务服务InoTask.exe使用共享的文件映射共享调度任务的信息。文件映射的安全描述符为空，这允许任意用户修复其内容。通过修改这个映射中的字符串攻击者就可以在InoTask进程中触发栈溢出，导致执行任意指令。 eTrust产品没有对控制台服务器的登录凭据执行充分的检查，远程攻击者可以通过发送特制的认证凭据触发栈溢出，导致执行任意指令。...

eTrust AntiVirus Agent r8 - Local Privilege Escalation

/ ---------------------------------------------------------------------- | 48Bits Advisory -=- Privilege Elevation in eTrust Antivirus Agent r8 | ---------------------------------------------------------------------- Affected versions : I have tested with: - eTrust Antivirus Agent r8 -...

CA eTrust AntiVirus Server inoweb Buffer Overflow Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Computer Associates AntiVirus Server. User interaction is not required to exploit this vulnerability. The specific flaw exists in the authentication function of the inoweb service that listens by default ...

BrightStor ARCserve Media Server SUN RPC buffer overflow

Added: 05/03/2007 CVE: CVE-2007-2139 BID: 23635 OSVDB: 34127 Background CA ARCserve Backup formerly BrightStor ARCserve Backup is a backup and recovery solution. ARCserve Media Server is a component which comes with ARCserve Backup. Problem ARCserve Media Server is affected by multiple buffer...

BrightStor ARCserve Media Server SUN RPC buffer overflow

Added: 05/03/2007 CVE: CVE-2007-2139 BID: 23635 OSVDB: 34127 Background CA ARCserve Backup formerly BrightStor ARCserve Backup is a backup and recovery solution. ARCserve Media Server is a component which comes with ARCserve Backup. Problem ARCserve Media Server is affected by multiple buffer...

BrightStor ARCserve Media Server SUN RPC buffer overflow

Added: 05/03/2007 CVE: CVE-2007-2139 BID: 23635 OSVDB: 34127 Background CA ARCserve Backup formerly BrightStor ARCserve Backup is a backup and recovery solution. ARCserve Media Server is a component which comes with ARCserve Backup. Problem ARCserve Media Server is affected by multiple buffer...

BrightStor ARCserve Media Server SUN RPC buffer overflow

Added: 05/03/2007 CVE: CVE-2007-2139 BID: 23635 OSVDB: 34127 Background CA ARCserve Backup formerly BrightStor ARCserve Backup is a backup and recovery solution. ARCserve Media Server is a component which comes with ARCserve Backup. Problem ARCserve Media Server is affected by multiple buffer...

[CAID 35198, 35276]: CA BrightStor ARCserve Backup Media Server Vulnerabilities

Title: CAID 35198, 35276: CA BrightStor ARCserve Backup Media Server Vulnerabilities CA Vuln ID CAID: 35198, 35276 CA Advisory Date: 2007-04-24 Reported By: ZDI Impact: Remote attackers can cause a denial of service or potentially execute arbitrary code. Summary: CA BrightStor ARCserve Backup Med...

Immunity Canvas: BRIGHTSTOR_MEDIA

Name| brightstormedia ---|--- CVE| CVE-2007-2139 Exploit Pack| CANVAS Description| CA BrightStor ARCserve Backup Media Server RPC Interface Overflow Notes| CVE Name: CVE-2007-2139 VENDOR: Computer Associates VersionsAffected: Repeatability: References:...

CVE-2007-2139

Multiple stack-based buffer overflows in the SUN RPC service in CA formerly Computer Associates BrightStor ARCserve Media Server, as used in BrightStor ARCserve Backup 9.01 through 11.5 SP2, BrightStor Enterprise Backup 10.5, Server Protection Suite 2, and Business Protection Suite 2, allow remot...

CVE-2007-2139

CVE-2007-2139 is a real vulnerability affecting CA BrightStor ARCserve Media Server (and related BrightStor ARCserve Backup/Enterprise components). Connected sources describe a stack-based buffer overflow in the MediaSrv SUN RPC handling caused by insufficient boundary checks when processing craf...

Sql injection

SQL injection vulnerability in CA Clever Path Portal allows remote authenticated users to execute limited SQL commands and retrieve arbitrary database contents via 1 the ofinterest parameter in a light search query, 2 description parameter in the advanced search query, and possibly other vectors...

CVE-2007-2230

CVE-2007-2230 describes a SQL injection vulnerability in the CA Clever Path Portal. The issue allows remote authenticated users to execute limited SQL commands and retrieve arbitrary database contents through multiple vectors, notably the ofinterest parameter in a light search query and the descr...

CVE-2007-2230

SQL injection vulnerability in CA Clever Path Portal allows remote authenticated users to execute limited SQL commands and retrieve arbitrary database contents via 1 the ofinterest parameter in a light search query, 2 description parameter in the advanced search query, and possibly other vectors...

CA BrightStor ArcServe Media Service Stack Buffer Overflow

This exploit targets a stack buffer overflow in the MediaSrv RPC service of CA BrightStor ARCserve. By sending a specially crafted SUNRPC request, an attacker can overflow a stack buffer and execute arbitrary code. Module Options msf use exploit/windows/brightstor/mediasrv/sunrpc msf...

CA BrightStor ARCserve Backup Media Server RPC service buffer overflows

Overview The CA BrightStor ARCserve Backup Media Server contains multiple buffer overflows in the RPC service, which can allow a remote, unauthenticated attacker to execute arbitrary code with elevated privileges. Description BrightStor ARCserve Backup is a backup and data retention tool that...