BrightStor ARCserve Message Engine opnum 0x10d buffer overflow

Added: 10/18/2007 CVE: CVE-2007-5327 BID: 26015 OSVDB: 41369 Background CA ARCserve Bac kup formerly BrightStor ARCserve Backup is a backup and recovery solution. It runs a Message Engine RPC service on port 6504/TCP by default. Problem A buffer overflow in BrightStor ARCserve Backup allows remot...

Sun Solaris RPC服务库librpcsvc(3LIB)拒绝服务漏洞

BUGTRAQ ID: 26071 Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 如果用户调用了automountd1M服务去访问导出了大量文件系统的远程NFS服务器的话，Solaris RPC服务库（librpcsvc3LIB）中的安全漏洞可能允许本地非特权用户在系统上导致automountd1M守护程序崩溃。如果这个漏洞被利用，则用户可能看到访问autofs4加载点的进程变得没有响应并挂起。在Solaris 8、Solaris 9和Solaris 10系统上，控制台会打印且syslogd1M守护程序会记录类似于以下的消息： Sep 7 08:50:20...

openSUSE 10 Security Update : samba (samba-3349)

Specially crafted MS-RPC packets could overwrite heap memory and therfore could potentially be exploited to execute code CVE-2007-2446. Authenticated users could leverage specially crafted MS-RPC packets to pass arguments unfiltered to /bin/sh CVE-2007-2447. %NASLMINLEVEL 70300 C Tenable Network...

openSUSE 10 Security Update : samba (samba-1830)

Prevent potential crash in winbindd's credential cache handling; 184450. - Fix memory exhaustion DoS; CVE-2006-3403; 190468. - Fix the munlock call, samba.org svn rev r16755 from Volker. - Change the kerberos principal for LDAP authentication to netbios-name$@realm from host/name@realm; 184450. -...

openSUSE 10 Security Update : samba (samba-3350)

Specially crafted MS-RPC packets could overwrite heap memory and therfore could potentially be exploited to execute code CVE-2007-2446. Authenticated users could leverage specially crafted MS-RPC packets to pass arguments unfiltered to /bin/sh CVE-2007-2447. A bug in the local SID/Name translatio...

openSUSE 10 Security Update : krb5 (krb5-3820)

This update fixes a stack-based buffer overflow in kadmind which can be exploited by authenticated remote users to gain root. CVE-2007-2798 Additionally two bugs in the RPC library of kadmind were fixed that can lead to remote system compromise. CVE-2007-2442, CVE-2007-2443 Note that third-party...

Code injection

Unspecified vulnerability in the Sun Solaris RPC services library librpcsvc on Solaris 8 through 10 allows remote attackers to cause a denial of service mountd crash via unspecified packets to a server that exports many filesystems, and allows local users to cause a denial of service automountd...

CVE-2007-5462

Unspecified vulnerability in the Sun Solaris RPC services library librpcsvc on Solaris 8 through 10 allows remote attackers to cause a denial of service mountd crash via unspecified packets to a server that exports many filesystems, and allows local users to cause a denial of service automountd...

CVE-2007-5462

Unspecified vulnerability in the Sun Solaris RPC services library librpcsvc on Solaris 8 through 10 allows remote attackers to cause a denial of service mountd crash via unspecified packets to a server that exports many filesystems, and allows local users to cause a denial of service automountd...

CVE-2007-5462

CVE-2007-5462 affects Sun Solaris librpcsvc (RPC services library) on Solaris 8–10, enabling a remote attacker to crash mountd (and locally automountd via requests) through unspecified packets when the server exports many filesystems. Patch information in connected documents shows Solaris patch 1...

CVE-2007-5462: Improper Input Validation

Unspecified vulnerability in the Sun Solaris RPC services library librpcsvc on Solaris 8 through 10 allows remote attackers to cause a denial of service mountd crash via unspecified packets to a server that exports many filesystems, and allows local users to cause a denial of service automountd...

DSA-1387-1 librpcsecgss

Bulletin has no description...

Buffer overflow

Multiple buffer overflows in 1 RPC and 2 rpcx.dll in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allow remote attackers to execute arbitrary code via unspecified vectors...

Stack overflow

The cadbd RPC service in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows remote attackers to 1 execute arbitrary code via stack-based buffer overflows in unspecified RPC procedures, and 2 trigger memory corruption related to the use of "handle" RPC arguments...

Stack overflow

Stack-based buffer overflow in the RPC interface for the Message Engine mediasvr.exe in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows remote attackers to execute arbitrary code via a long argument in the 0x10d opnum...

CVE-2007-5330

The cadbd RPC service in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows remote attackers to 1 execute arbitrary code via stack-based buffer overflows in unspecified RPC procedures, and 2 trigger memory corruption related to the use of "handle" RPC arguments...

CVE-2007-5327

Stack-based buffer overflow in the RPC interface for the Message Engine mediasvr.exe in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows remote attackers to execute arbitrary code via a long argument in the 0x10d opnum...

CVE-2007-5328

The Message Engine RPC service in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows attackers to execute arbitrary code by using certain "insecure method calls" to modify the file system and registry, aka "Privileged function exposure."...

CVE-2007-5327

The CVE-2007-5327 issue is a stack-based overflow in the CA BrightStor ARCserve Backup Message Engine RPC interface (mediasvr.exe) that can allow remote code execution via opnum 0x10d. Affected products include BrightStor ARCserve Backup from v9.01 to R11.5 and BrightStor Enterprise Backup r10.5,...

CVE-2007-5330

CVE-2007-5330 affects CA BrightStor ARCserve Backup and BrightStor Enterprise Backup on Windows. The cadbd RPC service is vulnerable to remote code execution via stack-based buffer overflows in unspecified RPC procedures, and to memory corruption from handling of RPC arguments as pointers. Exploi...