CVE-2006-0306

The CVE-2006-0306 vulnerability affects the DM Primer (dmprimer.exe) within the DM Deployment Common Component used by CA BrightStor Mobile Backup r4.0, CA BrightStor ARCserve Backup for Laptops & Desktops r11.0–r11.1 SP1, Unicenter Remote Control 6.0–6.0 SP1, and CA Desktop/Server Protection Sui...

CVE-2006-0307

The CVE-2006-0307 issue affects the CA DM Deployment Common Component (DMPrimer) used in several CA products: BrightStor Mobile Backup r4.0, BrightStor ARCserve Backup for Laptops & Desktops (r11.0, r11.1, r11.1 SP1), Unicenter Remote Control 6.x, CA Desktop Protection Suite r2, CA Server Protect...

CA DMPrimer Service Detection

The remote host is running the CA DMPrimer service DM Deployment Common Component. This service is bundled with products such as BrightStor ARCserve Backup for Laptops & Desktops, Unicenter Remote Control, CA Protection Suite, etc... C Tenable Network Security, Inc. include"compat.inc";...

[Full-disclosure] CAID 33756 - DM Deployment Common Component Vulnerabilities

Title: CAID 33756 - DM Deployment Common Component Vulnerabilities CA Vulnerability ID: 33756 Discovery Date: 2005-12-20 CA Advisory Date: 2006-01-17 Discovered By: Cengiz Aykanat CA internal audit, and KarmaatDesignFolksdotcomdotau. Impact: Remote attacker can cause a denial of service condition...

CVE-2006-0307

The DM Primer in the DM Deployment Common Component in Computer Associates CA BrightStor Mobile Backup r4.0, BrightStor ARCserve Backup for Laptops & Desktops r11.0, r11.1, r11.1 SP1, Unicenter Remote Control 6.0, 6.0 SP1, CA Desktop Protection Suite r2, CA Server Protection Suite r2, and CA...

CA DM Deployment Common Component Multiple DoS

The remote version of DMPrimer service CA DM Deployment Common Component is vulnerable to multiple Denial of Service attacks. An attacker can crash or may cause a high CPU utilization by sending a specially crafted UDP packets. C Tenable Network Security, Inc. include"compat.inc"; ifdescription...

[Full-disclosure] DM Primer error handling weakness & an old CAM BO revisited

Apologies for the poor grammer and formatting... DM Primer is a shared service related to CA's Unicenter Remote Control. It is used in Enterprise environments to deploy URC6 from the URC v6.x Administration server. Dmprimer.exe listens on a client device for instructions from the server in a...

CVE-2006-0306

The DM Primer dmprimer.exe in the DM Deployment Common Component in Computer Associates CA BrightStor Mobile Backup r4.0, BrightStor ARCserve Backup for Laptops & Desktops r11.0, r11.1, r11.1 SP1, Unicenter Remote Control 6.0, 6.0 SP1, CA Desktop Protection Suite r2, CA Server Protection Suite r2...

CVE-2005-4639

CVE-2005-4639: A buffer overflow in the CA-driver (dst_ca.c) for TwinHan DST Frontend/Card affects Linux kernel 2.6.12 and other versions before 2.6.15. It allows local users to crash the system and potentially execute arbitrary code by reading more than eight bytes into an eight-byte array. Publ...

CVE-2005-4639

Buffer overflow in the CA-driver dstca.c for TwinHan DST Frontend/Card in Linux kernel 2.6.12 and other versions before 2.6.15 allows local users to cause a denial of service crash and possibly execute arbitrary code by "reading more than 8 bytes into an 8 byte long array"...

CVE-2005-3653

Heap-based buffer overflow in the iGateway service for various Computer Associates CA iTechnology products, in iTechnology iGateway before 4.0.051230, allows remote attackers to execute arbitrary code via an HTTP request with a negative Content-Length field...

CA Vet Scan Engine < 11.9.1 Library Remote Heap Overflow

The remote host is running a version of CA Vet Scan Engine that is vulnerable to heap overflow. An attacker may exploit this flaw to execute arbitrary code on the remote host with the privileges of a local administrator or to disable the remote service remotely. To exploit this flaw, an attacker...

CA Multiple Products Message Queuing Multiple Remote Vulnerabilities

The remote version of CA Message Queuing Service contains a stack overflow in the 'logsecurity' function that may allow an attacker to execute arbitrary code on the remote host. This version is also prone to denial of service on the TCP port 4105 as well as arbitrary code execution through spoofe...

CA License Service Multiple Vulnerabilities

Computer Associate CA License Application is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2005 KK Liu Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CA Unicenter's File Transfer Service is running

CA Unicenter SPDX-FileCopyrightText: 1999 SecuriTeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10032";...

CA Unicenter's Transport Service is running

CA Unicenter Transport Service uses ports TCP:7001, TCP:7003 and UDP:7004 for communication between its clients and other CA Unicenter servers. Since the above ports are open, CA Unicenter SPDX-FileCopyrightText: 1999 SecuriTeam Some text descriptions might be excerpted from a referenced sources,...

CVE-2005-3372

Multiple interpretation error in eTrust CA 7.0.1.4 with the 11.9.1 engine allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could...

CVE-2005-3372

Multiple interpretation error in eTrust CA 7.0.1.4 with the 11.9.1 engine allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could...

CVE-2005-3372

The CVE-2005-3372 entry concerns eTrust CA 7.0.1.4 (11.9.1 engine). The vulnerability arises from a magic byte bug: files with an unsuspecting extension (e.g., BAT, HTML, EML) containing an MZ EXE-like signature are treated as safe types but can still execute as dangerous content. This bypasses v...

SUSE-SA:2005:061: openssl

The remote host is missing the patch for the advisory SUSE-SA:2005:061 openssl. The openssl cryptographic libraries have been updated to fix a protocol downgrading attack which allows a man-in-the-middle attacker to force the usage of SSLv2. This happens due to the work-around code of...