CVE-2006-6379: Undefined Security Weakness

Buffer overflow in the BrightStor Backup Discovery Service in multiple CA products, including ARCserve Backup r11.5 SP1 and earlier, ARCserve Backup 9.01 up to 11.1, Enterprise Backup 10.5, and CA Server Protection Suite r2, allows remote attackers to execute arbitrary code via unspecified vector...

Barracuda Networks Spam Firewall存在多个漏洞

Barracuda Networks Spam Firewall是一款用于保护邮件服务器的集成硬件和软件垃圾邮件解决方案。 Barracuda Networks Spam Firewall存在多个安全问题，远程攻击者可以利用漏洞获得密码和文件信息。 Barracuda Networks Spam Firewall 3.3.01.001到3.3.02.053版本存在内置"guest"帐户密码"bnadmin99"，利用这个帐户可登录WEB接口。...

[Full-disclosure] ZDI-06-031: CA Multiple Product Message Engine RPC Server Code Execution Vulnerability

ZDI-06-031: CA Multiple Product Message Engine RPC Server Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-031.html October 5, 2006 -- CVE ID: CVE-2006-5143 -- Affected Vendor: Computer Associates -- Affected Products: BrightStor ARCserve Backup R11.5 Server...

CVE-2006-5143: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in CA BrightStor ARCserve Backup r11.5 SP1 and earlier, r11.1, and 9.01; BrightStor ARCserve Backup for Windows r11; BrightStor Enterprise Backup 10.5; Server Protection Suite r2; and Business Protection Suite r2 allow remote attackers to execute arbitrary code via craft...

CA Multiple Product Message Engine RPC Server Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Computer Associates BrightStor ARCserve Backup, Enterprise Backup, Server Protection Suite and Business Protection Suite. Authentication is not required to exploit this vulnerability. The problem...

CVE-2006-3840: Undefined Security Weakness

The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU 24.39/1.78/epj/x.x.x.1780, including Proventia A, G, M, Server, and Desktop, BlackICE PC and Server Protection 3.6, and RealSecure 7.0, allows remote attackers to cause a denial of service infinite loop via a crafted...

Design/Logic Flaw

The DM Primer in the DM Deployment Common Component in Computer Associates CA BrightStor Mobile Backup r4.0, BrightStor ARCserve Backup for Laptops & Desktops r11.0, r11.1, r11.1 SP1, Unicenter Remote Control 6.0, 6.0 SP1, CA Desktop Protection Suite r2, CA Server Protection Suite r2, and CA...

PT-2006-1379 · Ca · Ca Business Protection Suite +5

Name of the Vulnerable Software and Affected Versions: CA BrightStor Mobile Backup version r4.0 CA BrightStor ARCserve Backup for Laptops & Desktops versions r11.0 through r11.1 SP1 CA Unicenter Remote Control versions 6.0 through 6.0 SP1 CA Desktop Protection Suite version r2 CA Server Protectio...

CVE-2006-0307

The CVE-2006-0307 issue affects the CA DM Deployment Common Component (DMPrimer) used in several CA products: BrightStor Mobile Backup r4.0, BrightStor ARCserve Backup for Laptops & Desktops (r11.0, r11.1, r11.1 SP1), Unicenter Remote Control 6.x, CA Desktop Protection Suite r2, CA Server Protect...

CVE-2006-0307: Undefined Security Weakness

The DM Primer in the DM Deployment Common Component in Computer Associates CA BrightStor Mobile Backup r4.0, BrightStor ARCserve Backup for Laptops & Desktops r11.0, r11.1, r11.1 SP1, Unicenter Remote Control 6.0, 6.0 SP1, CA Desktop Protection Suite r2, CA Server Protection Suite r2, and CA...

CVE-2006-0306: Undefined Security Weakness

The DM Primer dmprimer.exe in the DM Deployment Common Component in Computer Associates CA BrightStor Mobile Backup r4.0, BrightStor ARCserve Backup for Laptops & Desktops r11.0, r11.1, r11.1 SP1, Unicenter Remote Control 6.0, 6.0 SP1, CA Desktop Protection Suite r2, CA Server Protection Suite r2...

[Full-disclosure] NIC Chile CGI Script Zone Transfers

NIC Chile CGI Script Zone Transfers. Autor: Rodrigo Gutierrez rodrigo at intellicomp.cl Affected: All ".cl" domains which use NIC's Chile Secondary NS. Vendor url: http://www.nic.cl Rate: Critical Background. NIC Chile is a part of the University of Chile and is in charge of handling all the...

[Hat-Squad Advisory] Bakbone NetVault Heap overflow Vulnerabilities

Hat-Squad Advisory: BakBone NetVault Remote Heap and Local Buffer Overflow April 1, 2005 Product: BakBone NetVault Vendor URL: http://www.bakbone.com Version: NetVault 7.x, 6.x Vulnerability: Remote and Local Heap Buffer overflows Release Date:1 April 2005 Vendor Status: 17-3-2005: vendor notifie...

CVE-2004-1714

CVE-2004-1714 affects BlackICE PC Protection and Server Protection. The issue arises from installation of firewall.ini, blackice.ini, sigs.ini, and protect.ini with Everyone Full Control permissions, enabling a local attacker to crash the service or modify configuration by editing firewall.ini (e...

CVE-2004-1714: Incorrect Permission Assignment for Critical Resource

BlackICE PC Protection and Server Protection installs 1 firewall.ini, 2 blackice.ini, 3 sigs.ini and 4 protect.ini with Everyone Full Control permissions, which allows local users to cause a denial of service crash or modify configuration, as demonstrated by modifying firewall.ini to contain a...

CVE-2004-0193: Undefined Security Weakness

Heap-based buffer overflow in the ISS Protocol Analysis Module PAM, as used in certain versions of RealSecure Network 7.0 and Server Sensor 7.0, Proventia A, G, and M Series, RealSecure Desktop 7.0 and 3.6, RealSecure Guard 3.6, RealSecure Sentry 3.6, BlackICE PC Protection 3.6, and BlackICE Serv...

PT-2004-2618 · Unknown · Blackice Server Protection +1

Name of the Vulnerable Software and Affected Versions: BlackICE PC Protection and Server Protection affected versions not specified Description: The issue allows local users to cause a denial of service or modify configuration due to the installation of certain files with Everyone Full Control...

Mandrake Linux Security Advisory : openssl (MDKSA-2003:035)

Researchers discovered a timing-based attack on RSA keys that OpenSSL is generally vulnerable to, unless RSA blinding is enabled. Patches from the OpenSSL team have been applied to turn RSA blinding on by default. An extension of the 'Bleichenbacher attack' on RSA with PKS 1 v1.5 padding as used ...

Detectoid for System Center 2012 SP1 - Data Protection Manager Server

Detectoid for System Center 2012 SP1 - Data Protection Manager Server...

Q811114: Security Update (Windows XP or Windows XP Service Pack 1)

This update for Microsoft Internet Information Services version 5.1 can help protect your Web server from several new security vulnerabilities. After you install this item, you may have to restart your computer...