CVE-2007-1448

The Tape Engine in CA formerly Computer Associates BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to cause a denial of service disabled interface by calling an unspecified RPC function...

CVE-2007-1447

CVE-2007-1447 affects CA BrightStor ARCserve Backup Tape Engine (versions 11.5 and earlier). The vulnerability arises from memory corruption caused by improper data validation when processing RPC or stub data in the Tape Engine, enabling a remote attacker to cause DoS or potentially execute arbit...

CVE-2007-1448

The CVE-2007-1448 issue affects CA BrightStor ARCserve Backup Tape Engine (and related components) prior to 11.5, where an RPC call can disable the Tape Engine interface, causing DoS. Related advisories describe additional remote-execution/DoS vectors via the Tape Engine and Portmapper, including...

CA BrightStor ARCserve Backup Tape Engine and Portmapper Multiple Vulnerabilities (QO86255)

According to its version, the installation of BrightStor ARCserve Backup on the remote host is affected by multiple buffer overflows involving the application's Tape Engine and portmapper services. An unauthenticated, remote attacker may be able to leverage these issues to crash or disable the...

CA BrightStor ARCserve - 'msgeng.exe' Remote Stack Overflow

!/usr/bin/python This one was listed in the SANS TOP 20 and I needed an exploit for analysis. I couldnt find a reliable exploit for my analysis and so came up with this. Remote exploit for the CA BrightStor msgeng.exe service stack overflow vulnerability as described in LS-20060330.pdf on...

CA BrightStor ARCserve - msgeng.exe Remote Stack Overflow

CA BrightStor ARCserve - msgeng.exe Remote Stack Overflow !/usr/bin/python This one was listed in the SANS TOP 20 and I needed an exploit for analysis. I couldnt find a reliable exploit for my analysis and so came up with this. Remote exploit for the CA BrightStor msgeng.exe service stack overflo...

CVE-2007-1345

Unspecified vulnerability in cube.exe in the GINA component for CA Computer Associates eTrust Admin 8.1.0 through 8.1.2 allows attackers with physical interactive or Remote Desktop access to bypass authentication and gain privileges via the password reset interface...

CVE-2007-1345

CVE-2007-1345 affects CA eTrust Admin (GINA component) cube.exe in versions 8.1.0–8.1.2. It allows attackers with physical interactive access or Remote Desktop to bypass authentication and escalate privileges via the password-reset interface. Root cause: privilege-escalation in the reset workflow...

CVE-2007-1345

Unspecified vulnerability in cube.exe in the GINA component for CA Computer Associates eTrust Admin 8.1.0 through 8.1.2 allows attackers with physical interactive or Remote Desktop access to bypass authentication and gain privileges via the password reset interface...

CA eTrust privilege escalation

GINA password reset interface privilege escalation...

Heap overflow

Heap-based buffer overflow in SW3eng.exe in the eID Engine service in CA formerly Computer Associates eTrust Intrusion Detection 3.0.5.57 and earlier allows remote attackers to cause a denial of service application crash via a long key length value to the remote administration port 9191/tcp...

CVE-2007-1005

Heap-based buffer overflow in SW3eng.exe in the eID Engine service in CA formerly Computer Associates eTrust Intrusion Detection 3.0.5.57 and earlier allows remote attackers to cause a denial of service application crash via a long key length value to the remote administration port 9191/tcp...

CVE-2007-1005

CA eTrust Intrusion Detection (eID) is affected by CVE-2007-1005. A heap-based buffer/overrun occurs in SW3eng.exe within the eID Engine service when handling session keys for remote administration on port 9191/tcp, allowing a remote unauthenticated attacker to cause a denial of service (applicat...

CVE-2007-1005

Heap-based buffer overflow in SW3eng.exe in the eID Engine service in CA formerly Computer Associates eTrust Intrusion Detection 3.0.5.57 and earlier allows remote attackers to cause a denial of service application crash via a long key length value to the remote administration port 9191/tcp...

Null pointer dereference

The RPC Server service catirpc.exe in CA formerly Computer Associates BrightStor ARCserve Backup 11.5 SP2 and earlier allows remote attackers to cause a denial of service service crash via a crafted TADDR2UADDR that triggers a null pointer dereference in catirpc.dll, possibly related to null...

CVE-2007-0816

The RPC Server service catirpc.exe in CA formerly Computer Associates BrightStor ARCserve Backup 11.5 SP2 and earlier allows remote attackers to cause a denial of service service crash via a crafted TADDR2UADDR that triggers a null pointer dereference in catirpc.dll, possibly related to null...

CVE-2007-0816

CVE-2007-0816 affects CA BrightStor ARCserve Backup 11.5 SP2 and earlier; the RPC Server (catirpc.dll) can be remotely triggered via a crafted TADDR2UADDR to cause a null pointer dereference, leading to a denial of service. Vulnerable component: catirpc.dll in the RPC Server service; attack path ...

CVE-2007-0816

The RPC Server service catirpc.exe in CA formerly Computer Associates BrightStor ARCserve Backup 11.5 SP2 and earlier allows remote attackers to cause a denial of service service crash via a crafted TADDR2UADDR that triggers a null pointer dereference in catirpc.dll, possibly related to null...

CA Products Discovery Service Remote Buffer Overflow (CVE-2006-6379)

Computer Associates CA BrightStor ARCserve Backup and Business Protection Suite provide data protection and integrated backup and recovery solution for Windows, NetWare, Linux and UNIX environments. The vulnerability is due to a flaw in the Discovery Service component of the affected products. An...

CA BrightStor ARCserve Backup catirpc.exe远程拒绝服务漏洞

BrightStor ARCserve Backup可为各种平台的服务器提供备份和恢复保护功能。 BrightStor ARCserve Backup的CATIRPC.EXE进程在处理畸形用户请求时存在漏洞，远程攻击者可能利用此漏洞导致进程崩溃。 BrightStor ARCserve Backup在处理CA远程过程调用服务器（CATIRPC.EXE）服务的TADDR2UADDR（0x08）请求字节时存在空指针引用。如果攻击者向111/UDP端口发送了特制报文的话，就可以触发这个漏洞，导致服务崩溃。 Computer Associates BrightStor ARCserve Back...