CVE-2012-2972

CA ARCserve Backup for Windows (server and agent components) on r12.5, r15, and r16 is affected by CVE-2012-2972 due to insufficient validation of RPC requests, enabling a remote attacker to trigger a denial of service (service crash). This vulnerability affects the RPC handling in CA ARCserve Ba...

CA20121001-01: Security Notice for CA License

CA20121001-01: Security Notice for CA License Issued: October 01, 2012 CA Technologies Support is alerting customers to two potential risks in CA License also known as CA Licensing. Vulnerabilities exist that can allow a local attacker to execute arbitrary commands or gain elevated access. CA...

CVE-2012-0692

CA License aka CA Licensing before 1.90.03 allows local users to modify or create arbitrary files, and consequently gain privileges, via unspecified vectors...

Design/Logic Flaw

CA License aka CA Licensing before 1.90.03 does not properly restrict system commands, which allows local users to gain privileges via unspecified vectors...

Code injection

CA License aka CA Licensing before 1.90.03 allows local users to modify or create arbitrary files, and consequently gain privileges, via unspecified vectors...

CVE-2012-0691

CA License aka CA Licensing before 1.90.03 does not properly restrict system commands, which allows local users to gain privileges via unspecified vectors...

CVE-2012-0692

CA License aka CA Licensing before 1.90.03 allows local users to modify or create arbitrary files, and consequently gain privileges, via unspecified vectors...

CVE-2012-0691

CA License aka CA Licensing before 1.90.03 does not properly restrict system commands, which allows local users to gain privileges via unspecified vectors...

CVE-2012-0691

CVE-2012-0691 affects CA License (CA Licensing) before 1.90.03. The root cause is insecure use of system commands, enabling a local unprivileged user to execute commands with elevated privileges. The Security Notice provides patches and upgrade guidance to CA License 1.90.04 (or 1.90.03+ for non-...

CVE-2012-0692

CA License (CA Licensing) CVE-2012-0692: vulnerabilities exist in CA License before 1.90.03 that allow a local unprivileged user to create/modify arbitrary files and gain elevated access due to inadequate user validation. The Security Notice expands affected products and platforms (multiple CA pr...

Rogers CA Website - SQL Injection Vulnerability

Document Title: =============== Rogers CA Website - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=725 Release Date: ============= 2012-10-02 Vulnerability Laboratory ID VL-ID: ==================================== 725 Common...

Slackware Advisory SSA:2004-154-01 mod_ssl

The remote host is missing an update as announced via advisory SSA:2004-154-01. OpenVAS Vulnerability Test $Id: esoftslkssa200415401.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Rogers CA Website SQL Injection

Title: ====== Rogers CA Website - SQL Injection Vulnerability Date: ===== 2012-09-07 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=202 VL-ID: ===== 202 Common Vulnerability Scoring System: ==================================== 8.5 Introduction: ============= Rogers...

CA BrightStor ARCserve Backup Tape Engine RPC Procedure Memory Corruption (CVE-2007-1447)

A memory corruption vulnerability has been reported in CA BrightStor ARCserve. The vulnerability is due to improper data validation when processing stub data of an RPC call made to the Tape Engine. A remote attacker can exploit this issue by performing a malicious RPC call to a vulnerable server...

CVE-2010-5156

Race condition in CA Internet Security Suite Plus 2010 6.0.0.272 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory change...

Race condition

Race condition in CA Internet Security Suite Plus 2010 6.0.0.272 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory change...

CVE-2010-5156

Race condition in CA Internet Security Suite Plus 2010 6.0.0.272 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory change...

CVE-2010-5156

CVE-2010-5156 concerns CA Internet Security Suite Plus 2010, version 6.0.0.272 on Windows XP. A race condition allows local attackers to bypass kernel‑mode hook handlers and run code that could evade signature‑based detection, via user‑space memory changes during hook‑handler execution (KHOBE/arg...

DEBIAN-CVE-2012-2132

libsoup 2.32.2 and earlier does not validate certificates or clear the trust flag when the ssl-ca-file does not exist, which allows remote attackers to bypass authentication by connecting with a SSL connection...

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication libsoup 2.32.2 and earlier does not validate certificates or clear the trust flag when the ssl-ca-file does not exist, which allows remote attackers to bypass authentication by connecting with a SSL connection...