Multiple Computer Associates software products security vulnerabilities

Multiple buffer overflows in different network services Discovery Service, Massage Engines, Backup Server, RPC-based services...

LS-20060330 - CA BrightStor ARCserve Backup Remote Buffer Overflow Vulnerability

Overview: LSsec has discovered a vulnerability in Computer Associates BrightStor ARCserve Backup, which could be exploited by an anonymous attacker in order to execute arbitrary code with SYSTEM privileges on an affected system. The flaw specifically exists within the Message Engine msgeng.exe du...

LS-20060313 - CA BrightStor ARCserve Backup Remote Buffer Overflow Vulnerability

Overview: LSsec has discovered a vulnerability in Computer Associates BrightStor ARCserve Backup, which could be exploited by an anonymous attacker in order to execute arbitrary code with SYSTEM privileges on an affected system. The flaw specifically exists within the Message Engine msgeng.exe du...

CVE-2006-5143

Multiple buffer overflows in CA BrightStor ARCserve Backup r11.5 SP1 and earlier, r11.1, and 9.01; BrightStor ARCserve Backup for Windows r11; BrightStor Enterprise Backup 10.5; Server Protection Suite r2; and Business Protection Suite r2 allow remote attackers to execute arbitrary code via craft...

CVE-2006-5143

CVE-2006-5143 affects Computer Associates BrightStor ARCserve Backup and related Protection Suite products. The vulnerabilities are buffer overflows in multiple components: the Backup Agent RPC Server (DBASVR.exe) via RPC opcodes 0x01/0x02/0x18 on TCP 6071; the Message Engine RPC Server (msgeng.e...

CA Multiple Product Message Engine RPC Server Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Computer Associates BrightStor ARCserve Backup, Enterprise Backup, Server Protection Suite and Business Protection Suite. Authentication is not required to exploit this vulnerability. The problem...

Computer Associates Products Message Engine RPC Server - Multiple Buffer Overflow Vulnerabilities (2)

source: https://www.securityfocus.com/bid/20365/info Multiple Computer Associates products are prone to multiple buffer-overflow vulnerabilities because the applications using an affected library fail to properly bounds-check user-supplied input before copying it to an insufficiently sized memory...

Computer Associates Products Message Engine RPC Server - Multiple Buffer Overflow Vulnerabilities (2)

Computer Associates Products Message Engine RPC Server - Multiple Buffer Overflow Vulnerabilities 2 source: https://www.securityfocus.com/bid/20365/info Multiple Computer Associates products are prone to multiple buffer-overflow vulnerabilities because the applications using an affected library...

MSRPC Service Detection

The remote host is running a Windows RPC service. This service replies to the RPC Bind Request with a Bind Ack response. However it is not possible to determine the uuid of this service. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid22319; scriptversion"1.10";...

MS Windows NetpIsRemote() Remote Overflow Exploit (MS06-040) (2)

No description provided by source. / MS06-040 Remote Code Execution Proof of Concept Ported by ub3r st4r aka iRP --------------------------------------------------------------------- Tested Against: Windows XP SP1 Windows 2000 SP4 Systems Affected: Microsoft Windows 2000 SP0-SP4 Microsoft Windows...

Microsoft Windows - NetpIsRemote() Remote Overflow (MS06-040) (2)

Microsoft Windows - NetpIsRemote Remote Overflow MS06-040 2 / MS06-040 Remote Code Execution Proof of Concept Ported by ub3r st4r aka iRP --------------------------------------------------------------------- Tested Against: Windows XP SP1 Windows 2000 SP4 Systems Affected: Microsoft Windows 2000...

Microsoft Windows - NetpIsRemote() Remote Overflow (MS06-040) (2)

/ MS06-040 Remote Code Execution Proof of Concept Ported by ub3r st4r aka iRP --------------------------------------------------------------------- Tested Against: Windows XP SP1 Windows 2000 SP4 Systems Affected: Microsoft Windows 2000 SP0-SP4 Microsoft Windows XP SP0-SP1 Microsoft Windows NT 4....

Symantec Veritas Backup Exec for Windows Server vulnerable to heap-based buffer overflow

Overview Symantec Veritas Backup Exec for Windows Server contains multiple heap-based buffer overflow vulnerabilities which can allow a remote, authenticated attacker to cause a denial of service or execute arbitrary code. Description VERITAS Backup Exec for Windows Server is a data backup and...

Symantec Backup Exec buffer overflow

Buffer overflow in internal RPC-based protocol...

(Security Advisory) SYM06-014 Symantec Backup Exec Internal RPC Overflow

Any further revisions to this information, if required, will be posted to the official advisory located at : http://www.symantec.com/avcenter/security/Content/2006.08.11.html Symantec Security Advisory SYM06-014 BID 19479 11 August 2006 Symantec Backup Exec for Windows Server: RPC Interface Heap...

MS Windows NetpIsRemote() Remote Overflow Exploit (MS06-040)

Exploit for unknown platform in category remote exploits ============================================================ MS Windows NetpIsRemote Remote Overflow Exploit MS06-040 ============================================================ This file is part of the Metasploit Framework and may be...

Microsoft Windows - NetpIsRemote() Remote Overflow (MS06-040) (Metasploit)

Microsoft Windows - NetpIsRemote Remote Overflow MS06-040 Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the cor...

Microsoft Windows - NetpIsRemote() Remote Overflow (MS06-040) (Metasploit)

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

CVE-2006-3439

Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers, including anonymous users, to execute arbitrary code via a crafted RPC message, a different vulnerability than CVE-2006-1314...

CVE-2006-3439

CVE-2006-3439 is a buffer overflow in the Server Service (SRVSVC) RPC interface that can be triggered by malformed parameters to SRVSVC API functions, enabling remote code execution on affected Windows versions. Public context from connected docs shows exploits and disclosures tied to MS06-040, a...