813 matches found
AW: ARCserve 6.61 Share Access Vulnerability
Hi, the problem also applys to ArcServe 2000. This securityleak was announced by CA in the Storage-Newsletter september-edition. There is a patch for ArcServe 2000 with SP2a available from http://support.ca.com/Download/patches/asitnt/QO00945.html Couldn't find anything for ArcServe 6.61IT. Does...
ARCserve 6.61 Share Access Vulnerability
I have found a vulnerability with ARCServe for NT 6.61 SP2a. I stumbled upon this while performing a vulnerability analysis. Details: The default install of ARCServe for NT creates a hidden share on Windows NT machines when it is installed. The name of this share is ARCSERVE$. The permissions of...
CVE-2001-0960
Computer Associates ARCserve for NT 6.61 SP2a and ARCserve 2000 7.0 stores the backup agent user name and password in cleartext in the aremote.dmp file in the ARCSERVE$ hidden share, which allows local and remote attackers to gain privileges...
CVE-2001-0959
Computer Associates ARCserve for NT 6.61 SP2a and ARCserve 2000 7.0 creates a hidden share named ARCSERVE$, which allows remote attackers to obtain sensitive information and overwrite critical files...
CVE-1999-1049
ARCserve NT agents authenticate using a weak XOR scheme for passwords. The vulnerability allows remote attackers to sniff the authentication request sent to port 6050 and decrypt the password, leading to potential unauthorized access and confidentiality/ integrity impact as described in the CVE e...
CVE-1999-1049
ARCserve NT agents use weak encryption XOR for passwords, which allows remote attackers to sniff the authentication request to port 6050 and decrypt the password...
Дырка в ARCserve Client Agent
непривилегированный пользователь может выполнеить приложени с правами root из-за небезопасной работы с временными файлами...
CVE-2000-0224
The CVE-2000-0224 entry refers to ARCserve agent on SCO UnixWare 7.x. The vulnerability is a local privilege escalation via a symlink attack that could allow a local attacker to obtain root privileges. The description clearly states the affected product/component and the root cause (symlink-relat...
CVE-2000-0154
The CVE-2000-0154 entry concerns the ARCserve agent in UnixWare, where a local attacker can modify arbitrary files via a symlink attack. The available connected records confirm Tcl/UnixWare context and the vulnerability’s local access vector with a high attack complexity and low base score (NVD m...
CVE-2000-0154
The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack...
SCO Unixware 7.17.1.1 - ARCserver tmp Symlink
SCO Unixware 7.17.1.1 - ARCserver tmp Symlink source: https://www.securityfocus.com/bid/988/info A symlink following vulnerability exists in the ARCserve agent, as shipped with SCO Unixware 7. Upon startup, the asagent program will create several files in /tmp. These are created mode 777, and can...
arcserve.nt.agents.txt
Date: Sun, 21 Feb 1999 21:19:42 -0500 From: Weld Pond To: [email protected] Subject: Severe Security Hole in ARCserve NT agents fwd ---------- Forwarded message ---------- Date: Sun, 21 Feb 1999 17:44:55 -0500 From: ELVIS To: [email protected] Cc: [email protected], CAI , [email protected]...