Hawking Technology WR254-CA wireless routers hardcoded DNS server address

139.175.55.244 DNS address is hardcoded...

Hawking Technology wireless router WR254-CA DNS issue

Hi, I have discovered a security issue with Hawking Technology wireless router, model WR254-CA. Since they are still available on the market so I think it will be good to warn the community. This router contains a DNS address 139.175.55.244 hardcoded in the firmware. At least when used in DHCP...

CA BrightStor ARCserve Backup多个远程缓冲区溢出漏洞

CA BrightStor ARCserve Backup可为各种平台的服务器提供备份和恢复保护功能。 CA的多个产品实现上存在多个缓冲区溢出漏洞，远程攻击者可能利用这些漏洞在服务器上执行任意指令。 1. Backup Agent Service DBASVR.exe在6071端口上没能正确处理畸形请求，存在缓冲区溢出，远程非授权用户可以利用此漏洞执行任意指令。 2. Discovery Service在处理来自CheyenneDS Mailslot的超长消息时存在栈溢出漏洞，远程攻击者可以利用此漏洞控制服务器。 3. Discovery...

[CAID 34693, 34694]: CA BrightStor ARCserve Backup Multiple Buffer Overflow Vulnerabilities (UPDATED)

Our original fixes for the BrightStor ARCserve Backup vulnerabilities that we publicly disclosed on 2006-10-05 http://www3.ca.com/securityadvisor/blogs/posting.aspx?id=90744&pid=9377 5&date=2006/10 did not completely resolve one of the vulnerabilities. Consequently, we have released new fixes tha...

Immunity Canvas: BRIGHTSTOR_MESSAGE

Name| brightstormessage ---|--- CVE| CVE-2006-5143 Exploit Pack| CANVAS Description| CA BrightStor ARCserve Backup RPC Interface Overflow Notes| CVE Name: CVE-2006-5143 VENDOR: Computer Associates Notes: Platforms Tested: References: http://dvlabs.tippingpoint.com/advisory/TPTI-06-11 CVE Url:...

CVE-2006-5143

Multiple buffer overflows in CA BrightStor ARCserve Backup r11.5 SP1 and earlier, r11.1, and 9.01; BrightStor ARCserve Backup for Windows r11; BrightStor Enterprise Backup 10.5; Server Protection Suite r2; and Business Protection Suite r2 allow remote attackers to execute arbitrary code via craft...

CVE-2006-5142

Stack-based buffer overflow in CA BrightStor ARCserve Backup R11.5 client and server allows remote attackers to execute arbitrary code via long messages to the CheyenneDS Mailslot...

CVE-2006-5142

Stack-based buffer overflow in CA BrightStor ARCserve Backup R11.5 client and server allows remote attackers to execute arbitrary code via long messages to the CheyenneDS Mailslot...

CVE-2006-5143

CVE-2006-5143 affects Computer Associates BrightStor ARCserve Backup and related Protection Suite products. The vulnerabilities are buffer overflows in multiple components: the Backup Agent RPC Server (DBASVR.exe) via RPC opcodes 0x01/0x02/0x18 on TCP 6071; the Message Engine RPC Server (msgeng.e...

CVE-2006-5143

Multiple buffer overflows in CA BrightStor ARCserve Backup r11.5 SP1 and earlier, r11.1, and 9.01; BrightStor ARCserve Backup for Windows r11; BrightStor Enterprise Backup 10.5; Server Protection Suite r2; and Business Protection Suite r2 allow remote attackers to execute arbitrary code via craft...

CVE-2006-5142

CVE-2006-5142 describes a stack-based buffer overflow in CA BrightStor ARCserve Backup R11.5 client and server caused by processing long messages to the CheyenneDS Mailslot. The vulnerability allows remote attackers to execute arbitrary code on Windows systems hosting the BrightStor components. P...

[Full-disclosure] [CAID 34693, 34694]: CA BrightStor ARCserve Backup Multiple Buffer Overflow Vulnerabilities

Title: CAID 34693, 34694: CA BrightStor ARCserve Backup Multiple Buffer Overflow Vulnerabilities CA Vulnerability ID CAID: 34693, 34694 CA Advisory Date: 2006-10-05 Discovered By: TippingPoint, www.zerodayinitiative.com Impact: Remote attacker can execute arbitrary code. Summary: CA BrightStor...

CA BrightStor ARCserve Backup DBASVR for Windows Multiple Remote Buffer Overflows

This host is running BrightStor ARCServe DBA server for Windows. The remote version of this software is affected by multiple buffer overflow vulnerabilities. An attacker, by sending a specially crafted packet, may be able to execute code on the remote host. C Tenable Network Security, Inc. BAB...

CA BrightStor ARCserve Discovery Service Remote Buffer Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Computer Associates BrightStor ARCserve Backup, Enterprise Backup, Server Protection Suite and Business Protection Suite. Authentication is not required to exploit this vulnerability and both clien...

CA Multiple Product Message Engine RPC Server Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Computer Associates BrightStor ARCserve Backup, Enterprise Backup, Server Protection Suite and Business Protection Suite. Authentication is not required to exploit this vulnerability. The problem...

Computer Associates Products Message Engine RPC Server - Multiple Buffer Overflow Vulnerabilities (2)

source: https://www.securityfocus.com/bid/20365/info Multiple Computer Associates products are prone to multiple buffer-overflow vulnerabilities because the applications using an affected library fail to properly bounds-check user-supplied input before copying it to an insufficiently sized memory...

GLSA-200609-18 : Opera: RSA signature forgery

The remote host is affected by the vulnerability described in GLSA-200609-18 Opera: RSA signature forgery Opera makes use of OpenSSL, which fails to correctly verify PKCS 1 v1.5 RSA signatures signed by a key with exponent 3. Some CAs in Opera's list of trusted signers are using root certificates...

Multiple CA eTrust Security Command Center / eTrust Audit security vulnerabilities

Path disclosure, directory traversal, replay attacks...

CVE-2006-4899

The ePPIServlet script in Computer Associates CA eTrust Security Command Center 1.0 and r8 up to SP1 CR2, when running on Windows, allows remote attackers to obtain the web server path via a "'" single quote in the PIProfile function, which leaks the path in an error message...

CVE-2006-4899

CVE-2006-4899 affects CA eTrust Security Command Center (SCC) 1.0 and r8 up to SP1 CR2 on Windows. The ePPIServlet script’s PIProfile function leaks the web server path via a single quote in an error message, enabling remote attackers to discover the server path. This vulnerability’s impact is th...