CVE-2001-1252

CVE-2001-1252 affects Network Associates PGP Keyserver 7.0. Remote attackers can bypass authentication and reach the administrative web interface by directly requesting the CGI paths under keyserver/cgi-bin for the programs (console, cs, multi_config, directory). Root cause: authentication bypass...

CVE-2001-1320

Network Associates PGP Keyserver 7.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via exceptional BER encodings possibly buffer overflows, as demonstrated by the PROTOS LDAPv3 test suite...

CVE-2002-1598

Buffer overflows in Computer Associates MLink CA-MLink 6.5 and earlier may allow local users to execute arbitrary code via long command line arguments to 1 mlclear or 2 mllock...

CVE-2001-0625

The CVE-2001-0625 issue affects Computer Associates InoculateIT 6.0, where ftpdownload is vulnerable to a local symlink attack on /tmp/ftpdownload.log. This allows a local attacker to overwrite arbitrary files. The vulnerability is triggered by manipulating filesystem paths used by ftpdownload, e...

CVE-2001-1252

Network Associates PGP Keyserver 7.0 allows remote attackers to bypass authentication and access the administrative web interface via URLs that directly access cgi-bin instead of keyserver/cgi-bin for the programs 1 console, 2 cs, 3 multiconfig and 4 directory...

CVE-2001-0960

Computer Associates ARCserve for NT 6.61 SP2a and ARCserve 2000 7.0 stores the backup agent user name and password in cleartext in the aremote.dmp file in the ARCSERVE$ hidden share, which allows local and remote attackers to gain privileges...

CVE-2001-0625

ftpdownload in Computer Associates InoculateIT 6.0 allows a local attacker to overwrite arbitrary files via a symlink attack on /tmp/ftpdownload.log...

Network Associates PGP Keyserver contains multiple vulnerabilities in LDAP handling code

Overview The Network Associates PGP Keyserver contains vulnerabilities that may allow denial-of-service attacks, unauthorized privileged access, or both. These vulnerabilities were revealed using the PROTOS LDAPv3 test suite and are documented in CERT Advisory CA-2001-18. If your site uses this...

CVE-2001-1320

Network Associates PGP Keyserver 7.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via exceptional BER encodings possibly buffer overflows, as demonstrated by the PROTOS LDAPv3 test suite...

CVE-2001-0382

CVE-2001-0382 affects Computer Associates CCC Harvest 5.0 for Windows NT/2000. The vulnerability arises from weak password encryption, allowing a remote attacker to gain privileges within the Harvest application. CVSS v2 base score is 7.5 (HIGH) with network attack vector and no authentication. T...

CVE-2001-0382

Computer Associates CCC\Harvest 5.0 for Windows NT/2000 uses weak encryption for passwords, which allows a remote attacker to gain privileges on the application...

[wsir-01/02-03] PGP 7.0 Split Key/Cached Passphrase Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 TITLE: PGP 7.0 Split Key/Cached Passphrase Vulnerability ADVISORY ID: WSIR-01/02-03 DISCOVERED BY: Patrik Birgersson, Wkit Security AB CONTACT: [email protected] CLASS: --- OBJECT: PGP Desktop Security 7.0 VENDOR: Network Associates Technology Inc...

nai net tools pki server 1.0 - Directory Traversal

nai net tools pki server 1.0 - Directory Traversal source: https://www.securityfocus.com/bid/1537/info Certain versions of Network Associates Inc.'s Net Tools PKI Public Key Infrastructure server ship with a vulnerability which allows remote attackers to read any file in the system which the PKI...

NAI Net Tools PKI Server 1.0 - Format String

NAI Net Tools PKI Server 1.0 - Format String source: https://www.securityfocus.com/bid/1538/info Certain versions of Network Associates Inc.'s Net Tools PKI Public Key Infrastructure server ship with a vulnerability which allows remote attackers to execute arbitrary commands on the system which t...

nai net tools pki server 1.0 - Directory Traversal

source: https://www.securityfocus.com/bid/1537/info Certain versions of Network Associates Inc.'s Net Tools PKI Public Key Infrastructure server ship with a vulnerability which allows remote attackers to read any file in the system which the PKI server resides. The problem lies within the webserv...

Computer Associates eTrust Intrusion Detection 1.4.1.13 - Weak Encryption

Computer Associates eTrust Intrusion Detection 1.4.1.13 - Weak Encryption source: https://www.securityfocus.com/bid/1341/info A weak encryption scheme exists in Computer Associates eTrust Intrusion Detection System formerly known as SessionWall-3 password which authorizes users to view and...

WinWebserver-exploit.txt

http://www.sddt.com/files/library/98/06/25/tbc.html Source Programmers Discover Internet Server Bug Daily Transcript Business Report June 25, 1998 Programmers at San Diego Source, the online news service of the San Diego Daily Transcript, have discovered a security hole affecting Web server...

ca.inoculateit.nt.txt

Date: Wed, 12 May 1999 09:52:59 -0500 From: Bob Duffett To: [email protected] Subject: InoculateIT 4.53 Real-Time Exchange Scanner Flawed Manufacturer: Computer Associates Product: InoculateIT for Windows NT v4.53 Build 169, Agent for Microsoft Exchange This product has a major...