CA BrightStor ARCserve Tape Engine 0x8A Buffer Overflow Vulnerability

This Metasploit module exploits a stack buffer overflow in Computer Associates BrightStor ARCserve Backup r11.1 - r11.5. By sending a specially crafted DCERPC request, an attacker could overflow the buffer and execute arbitrary code. This file is part of the Metasploit Framework and may be subjec...

CA BrightStor ARCserve Tape Engine 0x8A Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'CA BrightStor ARCserve Tape Engine 0x...

Computer Associates ARCserve Backup LDBserver Remote Code Execution Vulnerability

The version of CA ARCserve Backup installed in the remote hosted is affected by a remote code execution vulnerability. A remote attacker can exploit this vulnerability by providing a specially crafted handlet argument to an RPC endpoint for the LDBserver service. C Tenable Network Security, Inc...

CA ARCserve Backup for Laptops and Desktops Server and CA Desktop Management Suite Multiple Remote Vulnerabilities

According to the version of rxRPC.dll installed on the remote host, the Computer Associates product is affected by multiple vulnerabilities that could allow a remote attacker to execute arbitrary code on the host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69317;...

CA ARCserve Backup for Laptops and Desktops Server, CA Protection Suite, and CA Desktop Management Suite Integer Underflow

According to the version of rxRPC.dll installed on the remote host, the Computer Associates product is affected by an integer underflow vulnerability that could allow a remote attacker to cause the LGServer service to crash or execute arbitrary code. C Tenable Network Security, Inc...

CA BrightStor ARCserve Backup Discovery Service Buffer Over-Read (CVE-2008-1979)

There exists a denial of service vulnerability in CA ARCserve Backup Discovery service. The vulnerability is due to insufficient input validation by the Discovery service. A remote unauthenticated attacker may exploit this vulnerability by sending a crafted message to the target server. Successfu...

CA ARCserve Backup Authentication Service Denial of Service (CVE-2012-2972)

A denial of service vulnerability has been reported in the CA ARCserve Backup authentication service...

CA ARCserve Backup Remote Code Execution (CA20121018) (uncredentialed check)

Binary data arcservebackupcve-2012-2971.nbin...

CA ARCserve Backup RPC Services Multiple Vulnerabilities - Windows

CA ARCserve Backup is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CA ARCserve Backup RPC Services Multiple Vulnerabilities (Windows)

This host is installed with CA ARCserve Backup and is prone multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbcaarcservebackuprpcservicesmultvuln.nasl 7552 2017-10-24 13:00:36Z cfischer $ CA ARCserve Backup RPC Services Multiple Vulnerabilities Windows Authors: Sharath S Copyright:...

CA ARCserve Backup Authentication service invalid virtual function call

Added: 11/09/2012 CVE: CVE-2012-2971 BID: 56116 OSVDB: 86416 Background CA ARCserve Backup formerly BrightStor ARCserve Backup is a backup and recovery solution. Problem An invalid virtual function call in the authentication service allows remote attackers to execute arbitrary commands. Resolutio...

CA ARCserve Backup Authentication service invalid virtual function call

Added: 11/09/2012 CVE: CVE-2012-2971 BID: 56116 OSVDB: 86416 Background CA ARCserve Backup formerly BrightStor ARCserve Backup is a backup and recovery solution. Problem An invalid virtual function call in the authentication service allows remote attackers to execute arbitrary commands. Resolutio...

CA ARCserve Backup Authentication service invalid virtual function call

Added: 11/09/2012 CVE: CVE-2012-2971 BID: 56116 OSVDB: 86416 Background CA ARCserve Backup formerly BrightStor ARCserve Backup is a backup and recovery solution. Problem An invalid virtual function call in the authentication service allows remote attackers to execute arbitrary commands. Resolutio...

CA ARCserve Backup Authentication service invalid virtual function call

Added: 11/09/2012 CVE: CVE-2012-2971 BID: 56116 OSVDB: 86416 Background CA ARCserve Backup formerly BrightStor ARCserve Backup is a backup and recovery solution. Problem An invalid virtual function call in the authentication service allows remote attackers to execute arbitrary commands. Resolutio...

CA ARCserve Backup Server Installed (credentialed check)

CA ARCserve Backup Server, a backup application, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62811; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/01/31"; scriptnameenglish:"CA ARCserv...

CA ARCserve Backup Multiple Vulnerabilities (CA20121018) (credentialed check)

The version of CA ARCserve Backup installed on the remote Windows host is potentially affected by multiple vulnerabilities : - A flaw exists with how RPC requests are processed that could lead to code execution on server installations. CVE-2012-2971 - A flaw exists with how RPC requests are...

CA ARCserve Backup Agent Installed

CA ARCserve Backup Agent, a backup agent for CA ARCserve Backup, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62810; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10";...

CA ARCserve Backup authentication service denial-of-service vulnerability

Overview The CA ARCserve Backup authentication service, caauthd.exe, is susceptible to a denial-of-service vulnerability. CA ARCserve Backup r16 SP1 was reported to be vulnerable. Description The Offensive Security advisory states:By specifying an invalid field size for the encrypted username or...

CA ARCserve Backup opcode 0x7a RWSList remote code execution vulnerability

Overview The CA ARCserve Backup authentication service, caauthd.exe, is susceptible to a pre-authentication remote code execution vulnerability. Arbitrary code will run with NT AUTHORITY\SYSTEM privileges. CA ARCserve Backup r16 SP1 was reported to be vulnerable. Description The Offensive Securit...

CA20121018-01: Security Notice for CA ARCserve Backup

-----BEGIN PGP SIGNED MESSAGE----- CA20121018-01: Security Notice for CA ARCserve Backup Issued: October 18, 2012 CA Technologies support is alerting customers to multiple risks with certain CA ARCserve Backup RPC services. Two vulnerabilities exist that can allow a remote attacker to execute...