CVE-2007-0816

The RPC Server service catirpc.exe in CA formerly Computer Associates BrightStor ARCserve Backup 11.5 SP2 and earlier allows remote attackers to cause a denial of service service crash via a crafted TADDR2UADDR that triggers a null pointer dereference in catirpc.dll, possibly related to null...

CVE-2007-0816

CVE-2007-0816 affects CA BrightStor ARCserve Backup 11.5 SP2 and earlier; the RPC Server (catirpc.dll) can be remotely triggered via a crafted TADDR2UADDR to cause a null pointer dereference, leading to a denial of service. Vulnerable component: catirpc.dll in the RPC Server service; attack path ...

Novell Client Print Provider Multiple Functions Buffer Overflow (CVE-2006-5854)

Novell NetWare is a network operating system for Microsoft Windows and Linux workstations/servers. Novell NetWare client's Spooler service nwspool.dll is included with the Novell Client for Microsoft Windows, and provides access to remote printing services via Remote Procedure Call RPC. A remote...

CA BrightStor ARCserve 11.5.2.0 - catirpc.dll RPC Server Denial of Service

CA BrightStor ARCserve 11.5.2.0 - catirpc.dll RPC Server Denial of Service !/usr/bin/ruby Computer Associates CA Brightstor Backup Remote Procedure Call Server DoS catirpc.dll Catirpc.exe - Provides the endpoint mapper and enables RPC services for BrightStor Backup products. 7c.350: Access...

CA BrightStor ARCserve 11.5.2.0 (catirpc.dll) RPC Server DoS Exploit

Exploit for unknown platform in category dos / poc ==================================================================== CA BrightStor ARCserve 11.5.2.0 catirpc.dll RPC Server DoS Exploit ==================================================================== !/usr/bin/ruby Computer Associates CA...

Medium Risk Vulnerability in PGP Desktop

Peter Winter-Smith of NGSSoftware has discovered a medium risk vulnerability in PGP Desktop which can allow a remote authenticated attacker to execute arbitrary code on a system on which PGP Desktop is installed. The vulnerability resides within the Windows Service which PGP Desktop installs whic...

WordPress 1.x2.0.x - Pingback SourceURI Denial of Service Information Disclosure

WordPress 1.x2.0.x - Pingback SourceURI Denial of Service Information Disclosure source: https://www.securityfocus.com/bid/22220/info WordPress is prone to a denial-of-service vulnerability and an information-disclosure vulnerability. Attackers can exploit these issues to consume memory and...

BrightStor ARCserve Message Engine opnum 0x75 buffer overflow

Added: 01/24/2007 CVE: CVE-2007-0169 BID: 22005 OSVDB: 31318 Background The BrightStor ARCserve Backup server runs the Message Engine RPC service on ports 6503/TCP and 6504/TCP by default. Problem A buffer overflow in BrightStor ARCserve Backup allows remote attackers to execute arbitrary command...

BrightStor ARCserve Message Engine opnum 0x2f buffer overflow

Added: 01/19/2007 CVE: CVE-2007-0169 BID: 22005 OSVDB: 31318 Background The BrightStor ARCserve Backup server runs the Message Engine RPC service on ports 6503/TCP and 6504/TCP by default. Problem A buffer overflow in BrightStor ARCserve Backup allows remote attackers to execute arbitrary command...

BrightStor ARCserve Message Engine opnum 0x2f buffer overflow

Added: 01/19/2007 CVE: CVE-2007-0169 BID: 22005 OSVDB: 31318 Background The BrightStor ARCserve Backup server runs the Message Engine RPC service on ports 6503/TCP and 6504/TCP by default. Problem A buffer overflow in BrightStor ARCserve Backup allows remote attackers to execute arbitrary command...

Computer Associates BrightStor ARCserve Backup MediaSVR.EXE变种远程缓冲区溢出漏洞

Computer Associates BrightStor ARCserve Backup是商业性质的企业级备份解决方案。 Computer Associates BrightStor ARCserve Backup包含的MediaSVR.EXE服务存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 漏洞是由于Mediasrv服务中处理SUNRPC接口中的RPC字符串存在缓冲区溢出，攻击者发送特殊构建的包到RPC接口可导致执行任意指令。 Computer Associates Server Protection Suite r2 Computer Associate...

CVE-2006-5172

Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates CA Brightstor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Protection Suites r2 allows remote attackers to execute arbitrary code via crafted SUNRPC packets, aka the "Mediasvr.exe String...

CVE-2006-5172

Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates CA Brightstor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Protection Suites r2 allows remote attackers to execute arbitrary code via crafted SUNRPC packets, aka the "Mediasvr.exe String...

CVE-2006-5171

Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates CA Brightstor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Protection Suites r2 allows remote attackers to execute arbitrary code via crafted SUNRPC packets, aka the "Mediasvr.exe Overflow...

CVE-2006-5171

CVE-2006-5171 is a stack-based buffer overflow in the SUN RPC interface of Mediasvr.exe used by CA Brightstor ARCserve Backup (9.01–11.5), Enterprise Backup 10.5, and CA Protection Suites r2. The flaw allows remote attackers to execute arbitrary code via crafted SUNRPC packets. Related entries (e...

CVE-2006-5172

The CVE-2006-5172 entry covers a stack-based buffer overflow in the SUN RPC service (SUNRPC interface) of Mediasvr.exe within CA Brightstor ARCserve Backup 9.01–11.5, CA Enterprise Backup 10.5, and CA Protection Suites r2. The underlying flaw is a buffer overflow triggered by crafted SUNRPC packe...

USN-408-1: krb5 vulnerability

The server-side portion of Kerberos' RPC library had a memory management flaw which allowed users of that library to call a function pointer located in unallocated memory. By doing specially crafted calls to the kadmind server, a remote attacker could exploit this to execute arbitrary code with...

CA BrightStor ARCServe BackUp Tape Engine服务TCP/6502端口远程溢出漏洞

BrightStor ARCserve Backup可为各种平台的服务器提供备份和恢复保护功能。 BrightStor ARCserve Backup在处理TCP/6502端口上的畸形请求时存在漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 默认监听于TCP/6502端口的BrightStor ARCserve Backup的Tape Engine服务（tapeeng.exe）没有正确地使用vsprintf。在62b93df0-8b02-11ce-876c-00805f842837接口上Opnum...

MIT Kerberos 5 RPC库远程代码执行漏洞

Kerberos是一款广泛使用的使用强壮的加密来验证客户端和服务器端的网络协议。MIT Kerberos 5是一种常用的开源Kerberos实现。 Kerberos的管理守护程序kadmind所使用的RPC库在释放内存中结构时对xprt-xpauth指针的处理存在漏洞，果远程攻击者能够发送恶意的kerberos报文的话，就会触发这个漏洞，导致拒绝服务或执行任意代码。 MIT Kerberos 5 1.5 - 1.5.1 MIT Kerberos 5 1.4 - 1.4.4 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

LS-20061002 - Computer Associates BrightStor ARCserve Backup Remote Code Execution Vulnerability

LS-20061002 LSsec has discovered a vulnerability in Computer Associates BrightStor ARCserve Backup v11.5, which could be exploited by an anonymous attacker in order to execute arbitrary code with SYSTEM privileges on an affected system. The flaw specifically exists within the Tape Engine...