Command injection

Multiple command handlers in CA Computer Associates BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 do not verify if a peer is authenticated, which allows remote attackers to add and delete users, and start client restores...

CVE-2007-5004

Integer overflow in CA Computer Associates BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allows remote attackers to execute arbitrary code via a long username and a certain "useless" password...

CVE-2007-5005

Directory traversal vulnerability in rxRPC.dll in CA Computer Associates BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allows remote attackers to upload and overwrite arbitrary files via a ..\ dot dot backslash sequence in the destination filename argument to sub-functio...

Integer overflow

Integer overflow in CA Computer Associates BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allows remote attackers to execute arbitrary code via a long username and a certain "useless" password...

Stack overflow

Multiple stack-based buffer overflows in CA Computer Associates BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allow remote attackers to execute arbitrary code via a long 1 username or 2 password to the rxrLogin command in rxRPC.dll, or a long 3 username argument to the...

DSquare Exploit Pack: D2SEC_CABLD

Name| d2seccabld ---|--- CVE| CVE-2007-5006 Exploit Pack| D2ExploitPack Description| CA BrightStor ARCserve Backup for Laptops & Desktops r11.5 LGServer Stack Overflow Notes|...

CVE-2007-5005

Directory traversal vulnerability in rxRPC.dll in CA Computer Associates BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allows remote attackers to upload and overwrite arbitrary files via a ..\ dot dot backslash sequence in the destination filename argument to sub-functio...

CVE-2007-5003

CVE-2007-5003 concerns multiple stack-based buffer overflows in CA BrightStor ARCserve Backup for Laptops and Desktops, affecting r11.0 through r11.5. The vulnerability arises in the rxRPC.dll routines rxrLogin (long username and long password) and GetUserInfo (long username), allowing remote att...

CVE-2007-5006

CA ARCserve Backup for Laptops and Desktops (L&D) versions r11.0–r11.5 are affected by CVE-2007-5006, an authentication-bypass flaw in the LGServer/rxRPC interface over TCP/1900. The vulnerability arises from command handlers that do not verify peer authentication, enabling remote attackers to ad...

CVE-2007-5006

Multiple command handlers in CA Computer Associates BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 do not verify if a peer is authenticated, which allows remote attackers to add and delete users, and start client restores...

CVE-2007-5004

CVE-2007-5004 affects CA BrightStor ARCserve Backup for Laptops and Desktops (LGServer) r11.0–r11.5. An integer overflow in processing the authentication password (long username and crafted password) could allow a remote attacker to execute arbitrary code. Connected advisories/SAINT notes indicat...

CVE-2007-5003

Multiple stack-based buffer overflows in CA Computer Associates BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allow remote attackers to execute arbitrary code via a long 1 username or 2 password to the rxrLogin command in rxRPC.dll, or a long 3 username argument to the...

CVE-2007-5005

CVE-2007-5005 affects CA ARCserve Backup for Laptops and Desktops, specifically rxRPC.dll in the rxrReceiveFileFromServer function, with r11.0–r11.5 susceptible. The vulnerability arises from directory traversal using a ..\ sequence in the destination filename, allowing a remote attacker to uploa...

CVE-2007-5004

Integer overflow in CA Computer Associates BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allows remote attackers to execute arbitrary code via a long username and a certain "useless" password...

CA ARCserve Backup多个远程溢出及目录遍历漏洞

BUGTRAQ ID: 24348 CVECAN ID: CVE-2007-3216,CVE-2007-5003,CVE-2007-5004,CVE-2007-5005,CVE-2007-5006 ARCServe Backup for Laptops and Desktops L&D是适用于中小业务的ARCServe Backup备份工具版本。 ARCserve L&D在处理RPC接口上的畸形请求数据时存在漏洞，远程攻击者可能利用此漏洞控制服务器或执行目录遍历。 ARCserve L&D使用TCP/1900端口做为RPC接口管理ARCserve L&D服务器，正常的通讯示例如下：...

iDefense Security Advisory 09.20.07: CA ARCServe Backup for Laptops and Desktops Multiple Buffer Overflow Vulnerabilities

CA ARCServe Backup for Laptops and Desktops Multiple Buffer Overflow Vulnerabilities iDefense Security Advisory 09.20.07 http://labs.idefense.com/intelligence/vulnerabilities/ Sep 20, 2007 I. BACKGROUND ARCServe Backup for Laptops and Desktops is a version of ARCServe Backup targeted at small to...

CA ARCServe Backup multiple security vulnerabilities

Authentication bypass, multiple buffer overflows TCP/1900...

[Full-disclosure] [CAID 35673, 35674, 35675, 35676, 35677]: CA ARCserve Backup for Laptops and Desktops Multiple Server Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: CAID 35673, 35674, 35675, 35676, 35677: CA ARCserve Backup for Laptops and Desktops Multiple Server Vulnerabilities CA Vuln ID CAID: 35673, 35674, 35675, 35676, 35677 CA Advisory Date: 2007-09-20 Reported By: Sean Larsson VeriSign iDefense Labs...

EEYE: Multiple Vulnerabilities in CA ARCserve for Laptops & Desktops

Multiple Vulnerabilities in CA ARCserve for Laptops & Desktops Release Date: September 20, 2007 Date Reported: June 5, 2007 Severity: High Remote Code Execution Vendor: Computer Associates CA Systems Affected: CA ARCserve Backup for Laptops and Desktops r11.5 CA ARCserve Backup for Laptops and...

Computer Associates Alert Notification Server buffer overflow

Added: 07/19/2007 CVE: CVE-2007-3825 BID: 24947 OSVDB: 36096 Background The Alert Notification Server is included with multiple Computer Associates products to provide notifications to console users. Problem The Alert Notification Server is affected by buffer overflow vulnerabilities in multiple...