CVE-2005-0640

Computer Associates CA Unicenter Asset Management UAM 4.0 does not properly initialize the "Change Credentials for Database" window, which allows local users to recover the SQL Admin password via certain methods...

CVE-2005-0641

CVE-2005-0641 affects the CA Unicenter Asset Management Reporter (UAM) 4.0, where a flaw in report templates (fields: name and description) enables cross-site scripting (XSS). The root cause is a vulnerability in how the report template content is handled, allowing remote attackers to inject arbi...

CVE-2005-0641

Cross-site scripting XSS vulnerability in the Reporter for Computer Associates CA Unicenter Asset Management UAM 4.0 allows remote attackers to inject arbitrary HTML or web script via the 1 name or 2 description in a report template...

CVE-2005-0583

Directory traversal vulnerability in Computer Associates CA License Client 0.1.0.15 allows remote attackers to create arbitrary files via .. dot dot sequences in a PUTOLF request...

CVE-2005-0583

CVE-2005-0583 concerns the CA License Client 0.1.0.15, where a directory traversal via PUTOLF requests can create arbitrary files across the host. Public sources (NVD/NVD-derived entries and iDEFENSE advisory) confirm the vulnerability exists in CA License Client/Server components and note that a...

CVE-2005-0582

Buffer overflow in Computer Associates CA License Client 0.1.0.15 allows remote attackers to execute arbitrary code via a long filename in a PUTOLF request...

CVE-2005-0581

Summary of vulnerability facts (CVE-2005-0581) : The CA License Client/Server/GCR components used in CA BrightStor ARCserve Backup 11.0 (and related CA License Server/Client software) are affected by a stack/buffer overflow when processing certain malformed or overly long GCR messages and GETCONF...

CVE-2005-0582

CVE-2005-0582 describes a buffer overflow in Computer Associates License Client 0.1.0.15 (License Client/Server) that can be triggered by a long filename in a PUTOLF request, allowing remote code execution with SYSTEM/root privileges on affected platforms. Connected advisories confirm a CA Licens...

Computer Associates License Client GETCONFIG Overflow

This module exploits a vulnerability in the CA License Client service. This exploit will only work if your IP address can be resolved from the target system point of view. This can be accomplished on a local network by running the 'nmbd' service that comes with Samba. If you are running this...

Computer Associates License Server GETCONFIG Overflow

This module exploits an vulnerability in the CA License Server network service. By sending an excessively long GETCONFIG packet the stack may be overwritten. Module Options msf use exploit/windows/license/calicserv/getconfig msf undefinedgetconfig show actions ...actions... msf undefinedgetconfig...

CVE-2004-1697

The CVE-2004-1697 issue affects CA Unicenter Management Portal versions 2.0 and 3.1, where the Forgot your Password link reveals different error messages for existing vs non-existing usernames, enabling remote username guessing. Underlying cause is information disclosure through authentication er...

cabrightstor_disco_servicepc.pm

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

cabrightstor_disco.pm

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

CA BrightStor Discovery Service TCP Overflow

This module exploits a vulnerability in the CA BrightStor Discovery Service. This vulnerability occurs when a specific type of request is sent to the TCP listener on port 41523. This vulnerability was discovered by cybertronicatgmx.net and affects all known versions of the BrightStor product. Thi...

CA BrightStor ARCserve/Enterprise Backup Persistent Default Administrator Account

The remote host is running UniversalAgent, an agent used by BrightStor ARCserve to perform backups. The remote version of this agent contains a default account with the username '\x02root\x03' and password '\x02%j8U+Ri\x03'. An attacker may use this account to gain full access to the remote host....

CA BrightStor ARCserve Backup - Remote Buffer Overflow (PoC)

/ BrightStor ARCserve Backup buffer overflow PoC [email protected] / include include include include include include define RED "\E31m\E1m" define GREEN "\E32m\E1m" define YELLOW "\E33m\E1m" define BLUE "\E34m\E1m" define NORMAL "\Em" define PORT 41523 void start int s char buffer4096; bzero...

CA BrightStor ARCserve Backup Remote Buffer Overlow PoC

Exploit for linux platform in category dos / poc ======================================================= CA BrightStor ARCserve Backup Remote Buffer Overlow PoC ======================================================= / BrightStor ARCserve Backup buffer overflow PoC email protected / include inclu...

CA BrightStor ARCserve Backup Remote Buffer Overlow PoC

No description provided by source. / BrightStor ARCserve Backup buffer overflow PoC [email protected] / include stdio.h include sys/types.h include sys/stat.h include fcntl.h include netinet/in.h include netdb.h define RED "\E31m\E1m" define GREEN "\E32m\E1m" define YELLOW "\E33m\E1m" define BL...

CVE-2004-2478

Unspecified vulnerability in Jetty HTTP Server, as used in 1 IBM Trading Partner Interchange before 4.2.4, 2 CA Unicenter Web Services Distributed Management WSDM before 3.11, and possibly other products, allows remote attackers to read arbitrary files via a .. dot dot in the URL...

CA BrightStor Discovery Service Stack Buffer Overflow

This module exploits a vulnerability in the CA BrightStor Discovery Service. This vulnerability occurs when a large request is sent to UDP port 41524, triggering a stack buffer overflow. Module Options msf use exploit/windows/brightstor/discovery/udp msf undefinedudp show actions ...actions... ms...