CVE-2012-2971

The server in CA ARCserve Backup r12.5, r15, and r16 on Windows does not properly process RPC requests, which allows remote attackers to execute arbitrary code or cause a denial of service via a crafted request...

Cross site request forgery (csrf)

The 1 server and 2 agent components in CA ARCserve Backup r12.5, r15, and r16 on Windows do not properly validate RPC requests, which allows remote attackers to cause a denial of service service crash via a crafted request...

Design/Logic Flaw

The server in CA ARCserve Backup r12.5, r15, and r16 on Windows does not properly process RPC requests, which allows remote attackers to execute arbitrary code or cause a denial of service via a crafted request...

CVE-2012-2972

CA ARCserve Backup for Windows (server and agent components) on r12.5, r15, and r16 is affected by CVE-2012-2972 due to insufficient validation of RPC requests, enabling a remote attacker to trigger a denial of service (service crash). This vulnerability affects the RPC handling in CA ARCserve Ba...

CVE-2012-2971

The server in CA ARCserve Backup r12.5, r15, and r16 on Windows does not properly process RPC requests, which allows remote attackers to execute arbitrary code or cause a denial of service via a crafted request...

CVE-2012-2972

The 1 server and 2 agent components in CA ARCserve Backup r12.5, r15, and r16 on Windows do not properly validate RPC requests, which allows remote attackers to cause a denial of service service crash via a crafted request...

CVE-2012-2971

CA ARCserve Backup on Windows (RPC Services) is affected by CVE-2012-2971 due to improper RPC request handling that can allow remote code execution or cause a denial of service. The issue relates to the authentication/RPC processing path and is noted in multiple advisories and vulnerability feeds...

CVE-2012-2972: Improper Input Validation

The 1 server and 2 agent components in CA ARCserve Backup r12.5, r15, and r16 on Windows do not properly validate RPC requests, which allows remote attackers to cause a denial of service service crash via a crafted request...

CVE-2012-2971: Improper Control of Generation of Code

The server in CA ARCserve Backup r12.5, r15, and r16 on Windows does not properly process RPC requests, which allows remote attackers to execute arbitrary code or cause a denial of service via a crafted request...

PT-2012-4405

Name of the Vulnerable Software and Affected Versions CA ARCserve Backup versions r12.5 through r16 Description The issue is related to the improper validation of RPC requests in the server and agent components, which can be exploited by remote attackers to cause a denial of service, resulting in...

PT-2012-4404

Name of the Vulnerable Software and Affected Versions CA ARCserve Backup versions r12.5 through r16 Description The issue is related to the server in CA ARCserve Backup not properly processing RPC requests. This allows remote attackers to execute arbitrary code or cause a denial of service via a...

FreeBSD : Zend Framework -- Multiple vulnerabilities via XXE injection (ec34d0c2-1799-11e2-b4ab-000c29033c32)

The Zend Framework team reports : The XmlRpc package of Zend Framework is vulnerable to XML eXternal Entity Injection attacks both server and client. The SimpleXMLElement class SimpleXML PHP extension is used in an insecure way to parse XML data. External entities can be specified by adding a...

CentOS 6 : libvirt (CESA-2012:1359)

Updated libvirt packages that fix one security issue and multiple bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Samba DCE RPC IDL Parser Out-of-bounds Array Access (CVE-2012-1182)

An out-of-bounds array access vulnerability has been reported in Samba...

RedHat Update for libvirt RHSA-2012:1359-01

Check for the Version of libvirt OpenVAS Vulnerability Test RedHat Update for libvirt RHSA-2012:1359-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CentOS Update for libvirt CESA-2012:1359 centos6

Check for the Version of libvirt OpenVAS Vulnerability Test CentOS Update for libvirt CESA-2012:1359 centos6 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

RedHat Update for libvirt RHSA-2012:1359-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for libvirt CESA-2012:1359 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Scientific Linux Security Update : libvirt on SL6.x i386/x86_64 (20121011)

The libvirt library is a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems. A flaw was found in libvirtd's RPC call handling. An attacker able to establish ...

libvirt security update

CentOS Errata and Security Advisory CESA-2012:1359 Updated libvirt packages that fix one security issue and multiple bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring...