Heap overflow

Heap-based buffer overflow in Microsoft MSN Messenger 6.2, 7.0, and 7.5, and Live Messenger 8.0 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors involving video conversation handling in Web Cam and video chat sessions...

CVE-2007-2931

Heap-based buffer overflow in Microsoft MSN Messenger 6.2, 7.0, and 7.5, and Live Messenger 8.0 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors involving video conversation handling in Web Cam and video chat sessions...

[Full-disclosure] [CAID 35527]: CA Message Queuing (CAM / CAFT) Buffer Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: CAID 35527: CA Message Queuing CAM / CAFT Buffer Overflow Vulnerability CA Vuln ID CAID: 35527 CA Advisory Date: 2007-07-24 Reported By: Paul Mehta of ISS X-Force Impact: A remote attacker can execute arbitrary code. Summary: Multiple CA produc...

CVE-2007-0058

CVE-2007-0058 affects Cisco Clean Access (CCA) on the Clean Access Manager (CAM): versions 3.5.x up to 3.5.9 and 3.6.x up to 3.6.1.1 allow remote attackers to bypass authentication and download arbitrary manual database backups by brute-forcing the snapshot filename and requesting the file direct...

Cisco Clean Access多个远程安全漏洞

Cisco Clean Access CCA是一种用于自动检测、隔离、清除受恶意代码感染的设备访问网络的软件解决方案。 CCA的实现上存在两个安全漏洞，远程攻击得可能利用这些漏洞获取非授权访问或得到敏感信息。 CCA与Cisco Clean Access Manager CAM交互时，交互双方需要相同的密钥，CAM端的密钥在CAM和CAS初始化时设定，CCA实现上的漏洞使此密钥不可被更改，网络上所有相关的设备共享了相同的密钥，可能导致非授权访问。此漏洞的Cisco Bug ID为CSCsd48626，影响如下的CCA版本： CCA releases 3.6.x - 3.6.4.2 CCA...

Cisco Security Advisory: Multiple Vulnerabilities in Cisco Clean Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in Cisco Clean Access Advisory ID: cisco-sa-20070103-CleanAccess http://www.cisco.com/warp/public/707/cisco-sa-20070103-CleanAccess.shtml Revision 1.0 For Public Release 2007 January 03 1600 UTC GMT -...

TZipBuilder / Abakt / CAM UnZip / ZipCentral buffer overflow

Buffer overflow on ZIP archives parsing...

[Full-disclosure] Secunia Research: CAM UnZip ZIP File Handling Buffer Overflow Vulnerability

====================================================================== Secunia Research 19/05/2006 - CAM UnZip ZIP File Handling Buffer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

Buffer overflow

Buffer overflow in 1 TZipBuilder 1.79.03.01, 2 Abakt 0.9.2 and 0.9.3-beta1, 3 CAM UnZip 4.0 and 4.3, and possibly other products, allows user-assisted attackers to execute arbitrary code via a ZIP archive that contains a file with a long file name...

CVE-2006-2161

Buffer overflow in 1 TZipBuilder 1.79.03.01, 2 Abakt 0.9.2 and 0.9.3-beta1, 3 CAM UnZip 4.0 and 4.3, and possibly other products, allows user-assisted attackers to execute arbitrary code via a ZIP archive that contains a file with a long file name...

CVE-2006-2161

Buffer overflow in 1 TZipBuilder 1.79.03.01, 2 Abakt 0.9.2 and 0.9.3-beta1, 3 CAM UnZip 4.0 and 4.3, and possibly other products, allows user-assisted attackers to execute arbitrary code via a ZIP archive that contains a file with a long file name...

KLA10096 ACE vulnerability in CAM UnZip

A buffer overflow was found in CAM UnZip. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed ZIP archive. Original advisories - Related products CAM-UnZip CVE list CVE-2006-2161 high Solution Update to...

CVE-2006-0529

CVE-2006-0529 affects Computer Associates’ CA Message Queuing (CAM/CAFT) before CAM 1.07 Build 220_16 and 1.11 Build 29_20. The issue allows a remote attacker to cause a denial of service by sending a crafted message to TCP port 4105. Public references and vendor/plugin notes confirm the DoS cond...

CVE-2006-0530

CVE-2006-0530 affects CA Message Queuing (CAM/CAFT) before 1.07 Build 220_16 and 1.11 Build 29_20. The vulnerability allows remote attackers to cause a denial of service by sending spoofed CAM control messages, impacting CA products that integrate CAM. Root cause: improper handling of spoofed CAM...

CAID 33581 - CA Message Queuing Denial of Service Vulnerabilities

Title: CAID 33581 - CA Message Queuing Denial of Service Vulnerabilities CA Vulnerability ID: 33581 CA Advisory Date: 2006-02-02 Discovered By: Nicolas Pouvesle of Tenable Network Security Impact: Remote attacker can cause a denial of service condition. Summary: The following two security...

Cisco Security Response: DoS in Cisco Clean Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Response ============== This is Cisco PSIRT's response to the statements made by Alex Lanstein in his message: DoS in Cisco Clean Access, posted on 2005-Dec-16, to the Bugtraq mailing list. An archived version of the report can be found here:...

CA CAM log_security() Stack Buffer Overflow (Win32)

This module exploits a vulnerability in the CA CAM service by passing a long parameter to the logsecurity function. The CAM service is part of TNG Unicenter. This module has been tested on Unicenter v3.1. This module requires Metasploit: https://metasploit.com/download Current source:...

CA Multiple Products Message Queuing Multiple Remote Vulnerabilities

The remote version of CA Message Queuing Service contains a stack overflow in the 'logsecurity' function that may allow an attacker to execute arbitrary code on the remote host. This version is also prone to denial of service on the TCP port 4105 as well as arbitrary code execution through spoofe...

CA Unicenter 3.1 CAM log_security() Stack Overflow Exploit (meta)

Exploit for unknown platform in category remote exploits ================================================================= CA Unicenter 3.1 CAM logsecurity Stack Overflow Exploit meta ================================================================= This file is part of the Metasploit Framework a...

CA Unicenter 3.1 - CAM log_security() Remote Stack Overflow (Metasploit)

CA Unicenter 3.1 - CAM logsecurity Remote Stack Overflow Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core...