CVE-2005-2668

Multiple buffer overflows in Computer Associates CA Message Queuing CAM / CAFT 1.05, 1.07 before Build 22013, and 1.11 before Build 2913 allow remote attackers to execute arbitrary code via unknown vectors...

CVE-2005-2669

Computer Associates CA Message Queuing CAM / CAFT 1.05, 1.07 before Build 22013, and 1.11 before Build 2913 allows remote attackers to execute arbitrary commands via spoofed CAFT packets...

CVE-2005-2667

CA Message Queuing Service (CAM/CAFT) remote vulnerability affects versions 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13. Astack overflow in the log_security function may allow remote arbitrary code execution, with additional denial-of-service impact on TCP port 4105. Some sources ...

CVE-2005-2669

CVE-2005-2669 affects Computer Associates Message Queuing Service (CAM/CAFT): vulnerable in CAM versions 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13. The root cause is a stack overflow in the remote service’s log_security function, which may allow an unauthenticated attacker to ex...

CVE-2005-2667

Unknown vulnerability in Computer Associates CA Message Queuing CAM / CAFT 1.05, 1.07 before Build 22013, and 1.11 before Build 2913 allows attackers to cause a denial of service via unknown vectors, aka the "CAM TCP port vulnerability."...

Multiple Computer Associates software vulnerabilities

CA Message Queuing service buffer overflow, DoS and privilege escalation...

Computer Associates Message Queuing software vulnerable to buffer overflows

Overview Computer Associates Message Queuing software contains buffer overflow conditions, which may allow a remote attacker to execute arbitrary code with elevated privileges. Description Computer Associates Message Queuing CAM / CAFT is a software component that provides messaging services. CAM...

CVE-2004-2436

The vulnerability in Computer Associates Unicenter Common Services 3.0 and earlier stems from storing the SA database password in cleartext inside the TndAddNspTmp.bat file, enabling local privilege escalation. Affected software: Unicenter Common Services 3.0 and earlier. Root cause: cleartext cr...

CVE-2004-2436

Computer Associates Unicenter Common Services 3.0 and earlier stores the database "SA" password in cleartext in the TndAddNspTmp.bat file, which could allow local users to gain privileges...

CVE-2004-2305

CVE-2004-2305 affects Computer Associates eTrust Antivirus EE 6.0–7.0. The vulnerability allows a remote attacker to bypass scanning by including a password-protected file inside a ZIP archive, which causes eTrust to scan only the password-protected file and skip the other files in the archive. T...

CVE-2004-2305

Computer Associates eTrust Antivirus EE 6.0 through 7.0 allows remote attackers to bypass virus scanning by including a password-protected file in a ZIP file, which causes eTrust to scan only the password protected file and skip the other files...

CVE-2005-2554

The CVE-2005-2554 issue affects Network Associates ePolicy Orchestrator Agent 3.5.0 (patch 3). The web server stores in insecure permissions for the Common Framework\Db folder, allowing local users to read arbitrary files by creating a subfolder in the EPO agent web root. This is an information‑l...

CVE-2005-2554

The web server for Network Associates ePolicy Orchestrator Agent 3.5.0 patch 3 uses insecure permissions for the "Common Framework\Db" folder, which allows local users to read arbitrary files by creating a subfolder in the EPO agent web root directory...

CVE-2005-2554

The web server for Network Associates ePolicy Orchestrator Agent 3.5.0 patch 3 uses insecure permissions for the "Common Framework\Db" folder, which allows local users to read arbitrary files by creating a subfolder in the EPO agent web root directory...

NAePolicy.txt

Summary: Privilege escalation in Network Associates ePolicy Orchestrator Agent 3.5.0 patch 3 http://www.nai.com/ Details: The ePolicy Orchestrator Agent web server which runs on TCP port 8081 by default and serves the McAfee Agent Activity Log can be used to view files that exist on the same...

Network Associates ePolicy Orchestrator Agent privilege escalation

By creating junction point NTFS hard link it's possible to access files with privileges of local system...

Privilege escalation in Network Associates ePolicy Orchestrator Agent 3.5.0 (patch 3)

Summary: Privilege escalation in Network Associates ePolicy Orchestrator Agent 3.5.0 patch 3 http://www.nai.com/ Details: The ePolicy Orchestrator Agent web server which runs on TCP port 8081 by default and serves the McAfee Agent Activity Log can be used to view files that exist on the same...

Computer Associates BrightStor ARCserve Backup Discovery Service SERVICEPC vulnerable to buffer overflow

Overview The Computer Associates BrightStor ARCserve Backup Discovery Service contains a buffer overflow, which may allow a remote attacker to execute arbitrary code. Description Computer Associates BrightStor ARCserve Backup is a cross-platform backup and recovery application. The ARCserve Backu...

Computer Associates BrightStor ARCserve Backup agent buffer overflow

Buffer overflow on malformed TCP/6070 data...

CVE-2002-1977

CVE-2002-1977 affects Network Associates PGP 7.0.4 and 7.1. The issue is that the Passphrase Cache timeout is not applied as configured, potentially allowing local attackers to open encrypted files without a passphrase. This is a technical description based on Red Hat/NVD entries; no exploitation...