Symantec Gateway Security 5400 Series 2.0 Error Page Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9755/info A vulnerability has been reported to exist in the Symantec Gateway Security Web based management console that may allow a remote user to launch cross-site scripting attacks. The issue is reported to exist due to...

Security Gateway Virtual Edition (VE) VMWare OVF template security update

...

Trend Micro Interscan Messaging Security Suite - Persistent Cross-Site Scripting Cross-Site Request Forgery

Trend Micro Interscan Messaging Security Suite - Persistent Cross-Site Scripting Cross-Site Request Forgery Exploit Title: Trend Micro InterScan Messaging Security Suite Stored XSS and CSRF Date: 13/09/2012 Exploit Author: modpr0be modpr0beatspentera.com Vendor Homepage: http://www.trendmicro.com...

Cyberoam UTM Appliance - SQL Injection Vulnerability

Document Title: =============== Cyberoam UTM Appliance - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=60 Release Date: ============= 2011-12-18 Vulnerability Laboratory ID VL-ID: ==================================== 60...

CA Gateway Security Remote Code Execution Vulnerability

This host is installed with CA Gateway Security and is prone to remote code execution Vulnerability. OpenVAS Vulnerability Test $Id: gbcagatewaysecurityremotecodeexecutionvuln.nasl 7024 2017-08-30 11:51:43Z teissa $ CA Gateway Security Remote Code Execution Vulnerability Authors: Rachana Shetty...

CA Gateway Security RCE Vulnerability

CA Gateway Security is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-2667

Icihttp.exe in CA Gateway Security for HTTP, as used in CA Gateway Security 8.1 before 8.1.0.69 and CA Total Defense r12, does not properly parse URLs, which allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption and daemon crash via a malformed...

Memory corruption

Icihttp.exe in CA Gateway Security for HTTP, as used in CA Gateway Security 8.1 before 8.1.0.69 and CA Total Defense r12, does not properly parse URLs, which allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption and daemon crash via a malformed...

CVE-2011-2667

CA Gateway Security (and CA Total Defense r12) is affected by CVE-2011-2667 due to a flawed URL parsing loop in the Icihttp.exe module, which can overflow heap memory on HTTP requests received on port 8080. This memory corruption can enable remote attackers to execute arbitrary code or trigger a ...

CVE-2011-2667

Icihttp.exe in CA Gateway Security for HTTP, as used in CA Gateway Security 8.1 before 8.1.0.69 and CA Total Defense r12, does not properly parse URLs, which allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption and daemon crash via a malformed...

CVE-2011-2667: Improper Restriction of Operations within the Bounds of a Memory Buffer

Icihttp.exe in CA Gateway Security for HTTP, as used in CA Gateway Security 8.1 before 8.1.0.69 and CA Total Defense r12, does not properly parse URLs, which allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption and daemon crash via a malformed...

CA Gateway Security Malformed HTTP Packet Remote Code Execution

According to its version number, the CA Gateway Security install on the remote Windows host is affected by a code execution vulnerability caused by a heap corruption condition when handling specially crafted HTTP requests on port 8080. A remote, unauthenticated attacker could exploit this flaw an...

CA Gateway Security Detection

Computer Associates Gateway Security, formerly Computer Associates Secure Content Management, a security application, is installed on the remote Windows host. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid55691; scriptversion"1.11";...

ZDI-11-237: CA Total Defense Suite Gateway Security Malformed HTTP Packet Remote Code Execution Vulnerability

ZDI-11-237: CA Total Defense Suite Gateway Security Malformed HTTP Packet Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-237 July 20, 2011 -- CVE ID: CVE-2011-2667 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: CA -- Affected Products: CA Tota...

CA20110720-01: Security Notice for CA Gateway Security and Total Defense

-----BEGIN PGP SIGNED MESSAGE----- CA20110720-01: Security Notice for CA Gateway Security and Total Defense Issued: July 20, 2011 CA Technologies support is alerting customers to a security risk with CA Gateway Security. A vulnerability exists that can allow a remote attacker to execute arbitrary...

CA Gateway Security / Total Defense memory corruption

Memory corruption on TCP/8080 HTTP request parsing...

PT-2011-4014

Name of the Vulnerable Software and Affected Versions CA Gateway Security versions prior to 8.1.0.69 CA Total Defense version r12 Description The issue is related to the improper parsing of URLs by Icihttp.exe in CA Gateway Security for HTTP, allowing remote attackers to execute arbitrary code or...

CA Total Defense Suite Gateway Security Malformed HTTP Packet Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of CA Total Defense Suite r12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Icihttp.exe module CA Gateway Security for HTTP, which responds to...

CVE-2011-0758

The eCS component ECSQdmn.exe in CA ETrust Secure Content Manager 8.0 and CA Gateway Security 8.1 allows remote attackers to cause a denial of service crash and execute arbitrary code via a crafted request to port 1882, involving an incorrect integer calculation and a heap-based buffer overflow...

Heap overflow

The eCS component ECSQdmn.exe in CA ETrust Secure Content Manager 8.0 and CA Gateway Security 8.1 allows remote attackers to cause a denial of service crash and execute arbitrary code via a crafted request to port 1882, involving an incorrect integer calculation and a heap-based buffer overflow...