Integer overflow

Multiple integer overflows in Computer Associates CA BrightStor Hierarchical Storage Manager HSM before r11.6 allow remote attackers to execute arbitrary code via unspecified CsAgent service commands that trigger a heap-based buffer overflow...

CVE-2007-5082

Multiple stack-based buffer overflows in Computer Associates CA BrightStor Hierarchical Storage Manager HSM before r11.6 allow remote attackers to execute arbitrary code via unspecified CsAgent service commands with certain opcodes, related to missing validation of a length parameter...

Sql injection

Multiple SQL injection vulnerabilities in Computer Associates CA BrightStor Hierarchical Storage Manager HSM before r11.6 allow remote attackers to execute arbitrary SQL commands via CsAgent service commands with opcodes 1 0x07, 2 0x08, 3 0x09, 4 0x1E, 5 0x32, 6 0x36, 7 0x40, and possibly others...

CVE-2007-5082

Multiple stack-based buffer overflows in Computer Associates CA BrightStor Hierarchical Storage Manager HSM before r11.6 allow remote attackers to execute arbitrary code via unspecified CsAgent service commands with certain opcodes, related to missing validation of a length parameter...

CVE-2007-5083

Multiple integer overflows in Computer Associates CA BrightStor Hierarchical Storage Manager HSM before r11.6 allow remote attackers to execute arbitrary code via unspecified CsAgent service commands that trigger a heap-based buffer overflow...

CVE-2007-5082

CVE-2007-5082 describes multiple stack-based buffer overflows in Computer Associates’ BrightStor HSM prior to r11.6, affecting the CsAgent service over TCP. A remote attacker can cause arbitrary code execution by sending crafted CsAgent commands with certain opcodes, due to missing validation of ...

CVE-2007-5083

BrightStor HSM CsAgent contains multiple remote vulnerabilities (CVE-2007-5082/5083/5084) in r11.5 that allow an unauthenticated attacker to execute arbitrary code via CsAgent commands over TCP port 2000 due to stack/heap buffer and integer overflow issues. iDefense/CVEs describe several buffer o...

CVE-2007-5084

CA BrightStor Hierarchical Storage Manager (HSM) before r11.6 is affected by multiple SQL injection vulnerabilities in the CsAgent service. The flaws reside in the CsAgent opcode handling, where certain commands (notably opcodes 0x07, 0x08, 0x09, 0x1E, 0x32, 0x36, 0x40 and possibly others) fail t...

iDefense Security Advisory 09.27.07: Computer Associates BrightStor HSM r11.5 Multiple Vulnerabilities

Computer Associates BrightStor HSM r11.5 Multiple Vulnerabilities iDefense Security Advisory 09.27.07 http://labs.idefense.com/intelligence/vulnerabilities/ Sep 27, 2007 I. BACKGROUND Computer Associates BrightStor Hierarchical Storage Manager HSM is an application used to create a tiered storage...

Code injection

nCipher HSM before 2.22.6, when generating a Diffie-Hellman public/private key pair without any specified DiscreteLogGroup parameters, chooses random parameters that could allow an attacker to crack the private key in significantly less time than a brute force attack...

CVE-2006-1115

nCipher HSM before 2.22.6, when generating a Diffie-Hellman public/private key pair without any specified DiscreteLogGroup parameters, chooses random parameters that could allow an attacker to crack the private key in significantly less time than a brute force attack...

CVE-2006-1115

nCipher HSM before 2.22.6, when generating a Diffie-Hellman public/private key pair without any specified DiscreteLogGroup parameters, chooses random parameters that could allow an attacker to crack the private key in significantly less time than a brute force attack...

CVE-2006-1115

CVE-2006-1115 affects nCipher HSM prior to 2.22.6. When generating a Diffie-Hellman public/private key pair without explicit DiscreteLogGroup parameters, the HSM may choose random parameters that could let an attacker recover the private key in less time than a brute-force search. The provided do...

nCipher Advisory #12: Insecure Generation of Diffie-Hellman keys

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 nCipher Security Advisory No. 12 Insecure Generation of Diffie-Hellman keys ------------------------------------------ Note ==== nCipher is publishing three advisories numbered 12, 13, and 14 simultaneously. You are advised to review all three before...

[SA19137] nCipher Products Multiple Vulnerabilities

TITLE: nCipher Products Multiple Vulnerabilities SECUNIA ADVISORY ID: SA19137 VERIFY ADVISORY: http://secunia.com/advisories/19137/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: From remote OPERATING SYSTEM: nCipher payShield http://secunia.com/product/2831/ nCipher nShield...

CVE-2004-0320

CVE-2004-0320 concerns nCipher Hardware Security Modules (HSM) versions 1.67.x–1.99.x. It describes a local-access flaw where an attacker can access secrets stored in the module’s run-time memory via certain sequences of commands. The publicly stated impact is partial confidentiality with local a...

nCipher HSM information leak

Under special conditions it's possible access private application data, including keys...

nCipher Advisory #8: payShield library may verify bad requests

nCipher Security Advisory No. 8 payShield library may verify bad requests ----------------------------------------- SUMMARY ======= When a command is issued to the payShield SPP library it may return StatusOK regardless of what the real reply status was. ISSUE DESCRIPTION ================= 1...