KLA10095 Vulnerability in CA Antivirus WebScan

An nnspecified vulnerability was found in CA Antivirus WebScan. By exploiting this vulnerability malicious users can c cause an undefined impact. This vulnerability can be exploited remotely. Original advisories - Related products CA-eTrust-Antivirus-WebScan-ActiveX-Control CVE list CVE-2006-3977...

CVE-2006-3976: Undefined Security Weakness

Unspecified vulnerability in CA eTrust Antivirus WebScan before 1.1.0.1048 allows remote attackers to install arbitrary files...

CVE-2006-3977: Undefined Security Weakness

Unspecified vulnerability in CA eTrust Antivirus WebScan before 1.1.0.1048 has unknown impact and remote attackers related to "improper processing of outdated WebScan components."...

CVE-2006-3975: Undefined Security Weakness

Unspecified vulnerability in CA eTrust Antivirus WebScan allows remote attackers to execute arbitrary code due to "improper bounds checking when processing certain user input."...

CA Integrated Threat Management, eTrust Antivirus, eTrust PestPatrol format string vulnerability

Format string bug in job description field...

CAID 34325 - CA ITM, eAV, ePP scan job description field format string vulnerability

Title: CAID 34325 - CA ITM, eAV, ePP scan job description field format string vulnerability CA Vulnerability ID: 34325 CA Advisory Date: 2006-06-26 Discovered By: Deral Heiland www.layereddefense.com Impact: Attackers can cause a denial of service condition or possibly execute arbitrary code...

CVE-2006-3223

The CVE-2006-3223 issue affects CA ITM, eTrust Antivirus (eAV), and eTrust PestPatrol (ePP) version 8.0. It is a format string vulnerability in the scan job description field that can crash the process and potentially execute arbitrary code. The vulnerability arises from improper handling of form...

CVE-2006-3223

Format string vulnerability in CA Integrated Threat Management ITM, eTrust Antivirus eAV, and eTrust PestPatrol ePP r8 allows attackers to cause a denial of service crash and possibly execute arbitrary code via a scan job with format strings in the description field...

CVE-2006-3223: Undefined Security Weakness

Format string vulnerability in CA Integrated Threat Management ITM, eTrust Antivirus eAV, and eTrust PestPatrol ePP r8 allows attackers to cause a denial of service crash and possibly execute arbitrary code via a scan job with format strings in the description field...

[Full-disclosure] CAID 34013 - CA Common Services CAIRIM on z/OS LMP SVC vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: CAID 34013 - CA Common Services CAIRIM on z/OS LMP SVC vulnerability CA Vulnerability ID: 34013 CA Advisory Date: 2006-05-02 Discovered By: IBM Global Services Impact: Local attacker can gain escalated privileges. Summary: A potential...

CA Common Services CAIRIM on z/OS LMP SVC privilege escalation

No description provided...

CVE-2006-2201: Undefined Security Weakness

Unspecified vulnerability in CA Resource Initialization Manager CAIRIM 1.x before 20060502, as used in z/OS Common Services and the LMP component in multiple products, allows attackers to violate integrity via a certain "problem state program" that uses SVC to gain access to supervisor state, key...

Mandrake Linux Security Advisory : kernel (MDKSA-2006:040)

A number of vulnerabilities were discovered and corrected in the Linux 2.6 kernel : The udpv6getport function in udp.c, when running IPv6, allows local users to cause a Denial of Service infinite loop and crash CVE-2005-2973. The mqopen system call in certain situations can decrement a counter...

CA Multiple Products Message Queuing Multiple Remote DoS

The remote version of CA Message Queuing Service is vulnerable to two flaws that could lead to a denial of service : - Improper handling of specially crafted TCP packets on port 4105 CVE-2006-0529 - Failure to handle spoofed UDP CAM requests CVE-2006-0530 C Tenable Network Security, Inc...

Design/Logic Flaw

Computer Associates CA Message Queuing CAM / CAFT before 1.07 Build 22016 and 1.11 Build 2920, as used in multiple CA products, allows remote attackers to cause a denial of service via a crafted message to TCP port 4105...

CVE-2006-0529

CVE-2006-0529 affects Computer Associates’ CA Message Queuing (CAM/CAFT) before CAM 1.07 Build 220_16 and 1.11 Build 29_20. The issue allows a remote attacker to cause a denial of service by sending a crafted message to TCP port 4105. Public references and vendor/plugin notes confirm the DoS cond...

CVE-2006-0530

CVE-2006-0530 affects CA Message Queuing (CAM/CAFT) before 1.07 Build 220_16 and 1.11 Build 29_20. The vulnerability allows remote attackers to cause a denial of service by sending spoofed CAM control messages, impacting CA products that integrate CAM. Root cause: improper handling of spoofed CAM...

Multiple Computer Associates (CA) products vulnerabilities

DM Primer and CA Unicenter buffer overflows, multiple DM Deployment DoS conditions. iGateway buffer overflow. CA Message Queuing DoS conditions...

CA iTechnology iGateway Service Content-Length Buffer Overflow

The remote host is using CA iTechnology iGateway service, a software component used in various products from CA. The version of the iGateway service installed on the remote host reportedly fails to sanitize Content-Length HTTP header values before using them to allocate heap memory. An attacker c...

CVE-2005-3653

CVE-2005-3653 describes a heap-based buffer overflow in the CA iTechnology iGateway service, caused by insufficient boundary checks of the HTTP Content-Length header. An unauthenticated remote attacker can send a crafted HTTP request with a negative Content-Length to trigger a heap overflow, pote...