iDefense Security Advisory 02.27.07: Computer Associates eTrust Intrusion Detection Denial of Service Vulnerability

Computer Associates eTrust Intrusion Detection Denial of Service Vulnerability iDefense Security Advisory 02.27.07 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 27, 2007 I. BACKGROUND Computer Associates eTrust Intrusion Detection is a network intrusion management and prevention...

CA BrightStor ARCserve Message Engine Buffer Overflow

This module exploits a buffer overflow in Computer Associates BrightStor ARCserve Backup 11.1 - 11.5 SP2. By sending a specially crafted RPC request, an attacker could overflow the buffer and execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source:...

CA BrightStor ARCserve Message Engine Heap Overflow

This module exploits a heap overflow in Computer Associates BrightStor ARCserve Backup 11.5. By sending a specially crafted RPC request, an attacker could overflow the buffer and execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source:...

Computer Associates BrightStor ARCserve Backup Catirpc.EXE远程拒绝服务漏洞

Computer Associates BrightStor ARCserve Backup是一款企业级别的备份解决方案。 BrightStor AECserver Backup包含的Catirpc.exe处理TADDR2UADDR过程存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 Catirpc.exe是为BrightStor Backup产品提供末端映射和启用RPC服务的程序。CATIRPC.dll不正确处理用于与CA RPC服务器通信的TADDR2UADDR过程，可导致一个NULL指针引用而造成拒绝服务攻击。 Computer Associates BrightSto...

Computer Associates BrightStor ARCserve Backup LGServer.EXE远程堆缓冲区溢出漏洞

Computer Associates BrightStor ARCserve Backup是一款企业级别的备份解决方案。 BrightStor ARCserve Backup包含的LGSERVER.EXE处理畸形报文存在问题，远程攻击者可以利用漏洞进行堆溢出攻击，可能以进程权限执行任意指令。 所有针对Mobile Backup服务进程LGSERVER.EXE监听在TCP 2200口的报文以"\x4e\x3d\x2c\x1b"序列开头，发送包含\x4e\x3d\x2c\x1b并追加65535字符的字符串可导致进程终止，可能导致任意代码执行。 Computer Associates...

CA BrightStor ARCserve 11.5.2.0 (catirpc.dll) RPC Server DoS Exploit

No description provided by source. !/usr/bin/ruby Computer Associates CA Brightstor Backup Remote Procedure Call Server DoS catirpc.dll Catirpc.exe - Provides the endpoint mapper and enables RPC services for BrightStor Backup products. 7c.350: Access violation - code c0000005 !!! second chance !!...

CA BrightStor ARCServe BackUp LGServer拒绝服务漏洞

BrightStor ARCserve Backup可为各种平台的服务器提供备份和恢复保护功能。 BrightStor ARCserve Backup处理带有畸形参数的请求报文时存在漏洞，远程攻击者可能利用此漏洞导致进程崩溃。 在认证协商期间客户端报文中的16进制地址（DWORD）0x11到0x14上的第三个客户端报文指定了数据长度。如果能够将这个值设置为0xff 0xff 0xff 0xff的话就会导致出现访问破坏，终止进程。 Computer Associates BrightStor ARCserve Backup for Laptops & Desktops r11.1 厂商补丁...

CA BrightStor ARCserve 11.5.2.0 - 'catirpc.dll' RPC Server Denial of Service

!/usr/bin/ruby Computer Associates CA Brightstor Backup Remote Procedure Call Server DoS catirpc.dll Catirpc.exe - Provides the endpoint mapper and enables RPC services for BrightStor Backup products. 7c.350: Access violation - code c0000005 !!! second chance !!! eax=007ef924 ebx=2e009560...

Remote Unauthenticated Code Execution II CA BrightStor ARCserve Backup for Laptops & Desktops

======= Summary ======= Today: 31 January 2007 Reference: NGS00403 Discover: Mark Litchfield Name: Remote Unauthenticated Code Execution II CA BrightStor ARCserve Backup for Laptops & Desktops r11.1 Vendor: Computer Associates Systems Affected: BrightStor ARCserve Backup for Laptops & Desktops...

CA BrightStor ARCserve 11.5.2.0 - catirpc.dll RPC Server Denial of Service

CA BrightStor ARCserve 11.5.2.0 - catirpc.dll RPC Server Denial of Service !/usr/bin/ruby Computer Associates CA Brightstor Backup Remote Procedure Call Server DoS catirpc.dll Catirpc.exe - Provides the endpoint mapper and enables RPC services for BrightStor Backup products. 7c.350: Access...

Remote DOS BrightStor ARCserve Backup for Laptops & Desktops

======= Summary ======= Today: 31 January 2007 Reference: NGS00402 Discover: Mark Litchfield Name: Remote DOS BrightStor ARCserve Backup for Laptops & Desktops r11.1 Vendor: Computer Associates Systems Affected: BrightStor ARCserve Backup for Laptops & Desktops r11.1 Risk: High Status: Published...

Computer Associates BrightStor ARCserve Backup LGSERVER.EXE stack buffer overflow

Overview Computer Associates BrightStor ARCserve Backup contains a stack buffer overflow, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Computer Associates BrightStor ARCserve Backup products come with a service called LGSERVER.EX...

CVE-2006-6952

Computer Associates Host Intrusion Prevention System HIPS drivers 1 Core kmxstart.sys 6.5.4.31 and 2 Firewall kmxfw.sys 6.5.4.10 allow local users to gain privileges by using certain privileged IOCTLs to modify callback function pointers...

CVE-2006-6952

CVE-2006-6952 affects CA Personal Firewall/CA Internet Security Suite 2007: HIPS Core (KmxStart.sys) and HIPS Firewall (KmxFw.sys) allow local privilege escalation by using privileged IOCTLs to modify callback pointers. Impact is local privilege escalation; affected products include CA Personal F...

CVE-2006-6952

Computer Associates Host Intrusion Prevention System HIPS drivers 1 Core kmxstart.sys 6.5.4.31 and 2 Firewall kmxfw.sys 6.5.4.10 allow local users to gain privileges by using certain privileged IOCTLs to modify callback function pointers...

Computer Associates BrightStor ARCserve Backup MediaSVR.EXE远程缓冲区溢出漏洞

Computer Associates BrightStor ARCserve Backup是商业性质的企业级备份解决方案。 Computer Associates BrightStor ARCserve Backup包含的MediaSVR.EXE服务存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 问题存在于SUNRPC接口中，其中用户定义的长度用于多个strncpy函数，当拷贝用户定义数据到固定大小的堆栈缓冲区时，可导致缓冲区溢出，精心构建提交数据可能以应用程序进程权限执行任意指令。 Computer Associates Server Protection...

Computer Associates BrightStor ARCserve Backup MediaSVR.EXE变种远程缓冲区溢出漏洞

Computer Associates BrightStor ARCserve Backup是商业性质的企业级备份解决方案。 Computer Associates BrightStor ARCserve Backup包含的MediaSVR.EXE服务存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 漏洞是由于Mediasrv服务中处理SUNRPC接口中的RPC字符串存在缓冲区溢出，攻击者发送特殊构建的包到RPC接口可导致执行任意指令。 Computer Associates Server Protection Suite r2 Computer Associate...

CVE-2006-5171

Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates CA Brightstor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Protection Suites r2 allows remote attackers to execute arbitrary code via crafted SUNRPC packets, aka the "Mediasvr.exe Overflow...

CVE-2006-5172

Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates CA Brightstor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Protection Suites r2 allows remote attackers to execute arbitrary code via crafted SUNRPC packets, aka the "Mediasvr.exe String...

CVE-2006-5172

Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates CA Brightstor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Protection Suites r2 allows remote attackers to execute arbitrary code via crafted SUNRPC packets, aka the "Mediasvr.exe String...