Immunity Canvas: BRIGHTSTOR_CMDEXEC

Name| brightstorcmdexec ---|--- CVE| CVE-2008-4397 Exploit Pack| CANVAS Description| brightstorcmdexec Notes| CVE Name: CVE-2008-4397 VENDOR: Computer Associates Notes: This exploit will start a TFTP server which is why it requires root and have the remote side download and execute a MOSDEF...

Computer Associates Service Desk Web表单跨站脚本漏洞

BUGTRAQ ID: 31412 CVE ID：CVE-2008-4119 CNCVE ID：CNCVE-20084119 Computer Associates Service Desk是一款帮助台解决方案。 Computer Associates Service Desk处理WEB表单的数据时缺少充分过滤，远程攻击者可以利用漏洞进行跨站脚本攻击，可获得目标用户敏感信息。 攻击者可以构建恶意WEB页，诱使用户点击进行攻击。 Computer Associates Service Desk r11.2 Computer Associates CMDB 11.2 Computer...

attachmax-sqlrfidisclose.txt

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV101$2008 ----------------------------------------------------------------------------------------- ECHOADV101$2008 Attachmax Dolphin = 2.1.0 Multiple Vulnerability...

Computer Associates 'kmxfw.sys'本地代码执行和远程拒绝服务漏洞

BUGTRAQ ID: 30651 CVE ID：CVE-2008-3174 CVE-2008-2926 CNCVE ID：CNCVE-20083174 CNCVE-20082926 CA HIPS包含漏洞允许本地攻击者导致系统崩溃或任意代码执行。漏洞是由于kmxfw.sys驱动不充分验证IOCTL请求引起的，攻击者发送IOCTL请求可导致系统崩溃或执行任意代码。 另外kmxfw.sys驱动不充分的验证可导致应用程序崩溃，造成拒绝服务攻击。 目前没有详细漏洞细节提供。 Computer Associates Personal Firewall 2008 Computer Associat...

CA ARCserve Backup for Laptops and Desktops整数溢出漏洞

BUGTRAQ ID: 30472 CVECAN ID: CVE-2008-3175 CA的ARCserve Backup可为各种平台的服务器提供备份和恢复保护功能。 CA ARCserve Backup for Laptops and Desktops的LGServer服务在处理入站消息时存在整数溢出漏洞，如果未经认证的远程攻击者向TCP 1900端口上的LGServer服务提交了恶意请求的话，就会触发这个溢出，导致拒绝服务或执行任意指令。 Computer Associates Protection Suites 3.1 Computer Associates Protection...

CA BrightStor ARCserve for Laptops and Desktops LGServer Buffer Overflow

This module exploits a stack buffer overflow in Computer Associates BrightStor ARCserve Backup for Laptops & Desktops 11.1. By sending a specially crafted request rxsUseLicenseIni, an attacker could overflow the buffer and execute arbitrary code. This module requires Metasploit:...

Multiple AntiVirus (zip file) Detection Bypass Exploit

No description provided by source. / zipbrk.c - Proof-of-Concept for CAN-2004-0932 - CAN-2004-0937 Copyright C 2004 oc.192 This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either...

SNMPv3 improper HMAC validation allows authentication bypass

Overview A vulnerability in the way implementations of SNMPv3 handle specially crafted packets may allow authentication bypass. Description SNMP can be configured to utilize version 3, which is the current standard version of SNMP. SNMPv3 incorporates security features such as authentication and...

CA BrightStor HSM Buffer Overflow

This module exploits one of the multiple stack buffer overflows in Computer Associates BrightStor HSM. By sending a specially crafted request, an attacker could overflow the buffer and execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source:...

CA eTrust Secure Content Manager多个栈溢出漏洞

BUGTRAQ ID: 29528 CVECAN ID: CVE-2008-2541 eTrust Secure Content Manager（eTrust SCM）是独立、统一的网关解决方案，能够帮助企业从中央管理控制台防范资料窃密以及网络和信息传递威胁。 eTrust SCM运行在8080端口上的HTTP网关服务（icihttp.exe）中存在多个栈溢出漏洞。如果用户发布了FTP服务请求，进程会试图修饰事件处理的内容，在这种情况下如果指定了超长的LIST或PASV命令响应，就会触发栈溢出，导致以SYSTEM权限执行任意指令。 Computer Associates eTrust...

ZDI-08-035: CA ETrust Secure Content Manager Gateway FTP PASV Stack Overflow Vulnerability

ZDI-08-035: CA ETrust Secure Content Manager Gateway FTP PASV Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-035 June 4, 2008 -- CVE ID: CVE-2008-2541 -- Affected Vendors: Computer Associates -- Affected Products: Computer Associates eTrust Secure Content Manager ...

TPTI-08-05: CA ETrust Secure Content Manager Gateway FTP LIST Stack Overflow Vulnerability

TPTI-08-05: CA ETrust Secure Content Manager Gateway FTP LIST Stack Overflow Vulnerability http://dvlabs.tippingpoint.com/advisory/TPTI-08-05 June 4, 2008 -- CVE ID: CVE-2008-2541 -- Affected Vendors: Computer Associates -- Affected Products: Computer Associates eTrust Secure Content Manager --...

ZDI-08-036: CA ETrust Secure Content Manager Gateway FTP LIST Stack Overflow

ZDI-08-036: CA ETrust Secure Content Manager Gateway FTP LIST Stack Overflow http://www.zerodayinitiative.com/advisories/ZDI-08-036 June 4, 2008 -- CVE ID: CVE-2008-2541 -- Affected Vendors: Computer Associates -- Affected Products: Computer Associates eTrust Secure Content Manager -- Vulnerabili...

TPTI-08-05: CA ETrust Secure Content Manager Gateway FTP LIST Stack Overflow Vulnerability

TPTI-08-05: CA ETrust Secure Content Manager Gateway FTP LIST Stack Overflow Vulnerability http://dvlabs.tippingpoint.com/advisory/TPTI-08-05 June 4, 2008 -- CVE ID: CVE-2008-2541 -- Affected Vendors: Computer Associates -- Affected Products: Computer Associates eTrust Secure Content Manager --...

CA Internet Security Suite - UmxEventCli.dll ActiveX Control Arbitrary File Overwrite

CA Internet Security Suite - UmxEventCli.dll ActiveX Control Arbitrary File Overwrite source: https://www.securityfocus.com/bid/29406/info A Computer Associates Internet Security Suite ActiveX control is prone to a vulnerability that lets attackers overwrite files with arbitrary,...

CA Internet Security Suite - 'UmxEventCli.dll' ActiveX Control Arbitrary File Overwrite

source: https://www.securityfocus.com/bid/29406/info A Computer Associates Internet Security Suite ActiveX control is prone to a vulnerability that lets attackers overwrite files with arbitrary, attacker-controlled content. The issue occurs because the control fails to sanitize user-supplied inpu...

CA ARCserve Backup caloggerd和xdr函数目录遍历及栈溢出漏洞

BUGTRAQ ID: 29283 CVECAN ID: CVE-2008-2241,CVE-2008-2242 BrightStor ARCserve Backup可为各种平台的服务器提供备份和恢复保护功能。 ARCserve Backup的caloggerd日志守护程序在处理日志消息时对提供的路径缺少检查，如果攻击者向文件附加了恶意数据的话，就可能导致在生成日志时导致目录遍历攻击。 如果向ARCserve Backup的xdrrwsstring库函数传送了超长参数的话，就可能触发栈溢出，导致执行任意指令。 Computer Associates Server Protection r...

ZDI-08-027: CA BrightStor ARCserve Backup Arbitrary File Writing Vulnerability

ZDI-08-027: CA BrightStor ARCserve Backup Arbitrary File Writing Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-027 -- CVE ID: CVE-2008-2241 -- Affected Vendors: Computer Associates -- Affected Products: Computer Associates BrightStor ARCserve Server -- TippingPointTM IPS Custom...

CA BrightStor ARCserve for Laptops and Desktops LGServer Buffer Overflow

This module exploits a stack buffer overflow in Computer Associates BrightStor ARCserve Backup for Laptops & Desktops 11.1. By sending a specially crafted request, an attacker could overflow the buffer and execute arbitrary code. This module requires Metasploit: https://metasploit.com/download...

Computer Associates Alert Notification Server opcode 23 buffer overflow

Added: 04/25/2008 CVE: CVE-2007-4620 BID: 28605 OSVDB: 44040 Background The Alert Notification Server is included with multiple Computer Associates products to provide notifications to console users. Problem The Alert Notification Server is affected by buffer overflow vulnerabilities in multiple...