EUVD-2015-6790

Malware in sbrugna...

EUVD-2015-6789

Malware in sbrugna...

CVE-2015-6854

The non-Domino web agents in CA Single Sign-On aka SSO, formerly SiteMinder R6, R12.0 before SP3 CR13, R12.0J before SP3 CR1.2, and R12.5 before CR5 allow remote attackers to cause a denial of service daemon crash or obtain sensitive information via a crafted request...

CVE-2015-6853

The Domino web agent in CA Single Sign-On aka SSO, formerly SiteMinder R6, R12.0 before SP3 CR13, R12.0J before SP3 CR1.2, R12.5 before CR5, R12.51 before CR4, and R12.52 before SP1 CR3 allows remote attackers to cause a denial of service daemon crash or obtain sensitive information via a crafted...

Cross site request forgery (csrf)

The non-Domino web agents in CA Single Sign-On aka SSO, formerly SiteMinder R6, R12.0 before SP3 CR13, R12.0J before SP3 CR1.2, and R12.5 before CR5 allow remote attackers to cause a denial of service daemon crash or obtain sensitive information via a crafted request...

Cross site request forgery (csrf)

The Domino web agent in CA Single Sign-On aka SSO, formerly SiteMinder R6, R12.0 before SP3 CR13, R12.0J before SP3 CR1.2, R12.5 before CR5, R12.51 before CR4, and R12.52 before SP1 CR3 allows remote attackers to cause a denial of service daemon crash or obtain sensitive information via a crafted...

CVE-2015-6853

The Domino web agent in CA Single Sign-On aka SSO, formerly SiteMinder R6, R12.0 before SP3 CR13, R12.0J before SP3 CR1.2, R12.5 before CR5, R12.51 before CR4, and R12.52 before SP1 CR3 allows remote attackers to cause a denial of service daemon crash or obtain sensitive information via a crafted...

CVE-2015-6854

The non-Domino web agents in CA Single Sign-On aka SSO, formerly SiteMinder R6, R12.0 before SP3 CR13, R12.0J before SP3 CR1.2, and R12.5 before CR5 allow remote attackers to cause a denial of service daemon crash or obtain sensitive information via a crafted request...

CVE-2015-6853

Technical details about CVE-2015-6853 are not publicly provided in the supplied documents; sources largely reiterate the vulnerability exists and can cause DoS or information disclosure. Monitor for updates.

CVE-2015-6854

CA Single Sign-On (SSO) non-Domino Web Agent affected across multiple releases: R6, R12.0 before SP3 CR13, R12.0J before SP3 CR1.2, and R12.5 before CR5. The issue allows remote attackers to trigger a denial of service (daemon crash) or access sensitive information via a crafted request. Root cau...

CVE-2015-6854: Insufficient Verification of Data Authenticity

The non-Domino web agents in CA Single Sign-On aka SSO, formerly SiteMinder R6, R12.0 before SP3 CR13, R12.0J before SP3 CR1.2, and R12.5 before CR5 allow remote attackers to cause a denial of service daemon crash or obtain sensitive information via a crafted request...

CVE-2015-6853: Insufficient Verification of Data Authenticity

The Domino web agent in CA Single Sign-On aka SSO, formerly SiteMinder R6, R12.0 before SP3 CR13, R12.0J before SP3 CR1.2, R12.5 before CR5, R12.51 before CR4, and R12.52 before SP1 CR3 allows remote attackers to cause a denial of service daemon crash or obtain sensitive information via a crafted...

PT-2016-3724

Name of the Vulnerable Software and Affected Versions CA Single Sign-On versions R6, R12.0 before SP3 CR13, R12.0J before SP3 CR1.2, R12.5 before CR5 Description The issue allows remote attackers to cause a denial of service or obtain sensitive information via a crafted request. This is related t...

PT-2016-3723

Name of the Vulnerable Software and Affected Versions CA Single Sign-On versions R6, R12.0 before SP3 CR13, R12.0J before SP3 CR1.2, R12.5 before CR5, R12.51 before CR4, R12.52 before SP1 CR3 Description The issue allows remote attackers to cause a denial of service or obtain sensitive informatio...

CA20111116-01: Security Notice for CA Directory

-----BEGIN PGP SIGNED MESSAGE----- CA20111116-01: Security Notice for CA Directory Issued: November 16, 2011 CA Technologies Support is alerting customers to a potential risk with CA Directory. A vulnerability exists that can allow a remote attacker to cause a denial of service condition...

CA Products That Embed Ingres Multiple Vulnerabilities

Title: CA Products That Embed Ingres Multiple Vulnerabilities CA Advisory Date: 2008-08-01 Reported By: iDefense Labs Impact: A remote attacker can execute arbitrary code, gain privileges, or cause a denial of service condition. Summary: CA products that embed Ingres contain multiple...