3734 matches found
Buffer overflow
Multiple buffer overflows in CA XOsoft r12.0 and r12.5 allow remote attackers to execute arbitrary code via 1 a malformed request to the wsman/xosoapapi.asmx SOAP endpoint or 2 a long string to the entrypoint.aspx service...
CVE-2010-1221
CA XOsoft r12.0 and r12.5 does not properly perform authentication, which allows remote attackers to enumerate usernames via a SOAP request...
CVE-2010-1221
CA XOsoft r12.0 and r12.5 does not properly perform authentication, which allows remote attackers to enumerate usernames via a SOAP request...
CVE-2010-1221
CVE-2010-1221 affects CA XOsoft products (r12.0 and r12.5). The vulnerability arises from improper authentication, allowing unauthenticated remote SOAP requests to enumerate usernames (information disclosure with partial confidentiality impact). The NVD CVE entry notes a network attack vector wit...
CVE-2010-1223
Multiple buffer overflows in CA XOsoft r12.0 and r12.5 allow remote attackers to execute arbitrary code via 1 a malformed request to the wsman/xosoapapi.asmx SOAP endpoint or 2 a long string to the entrypoint.aspx service...
CVE-2010-1223
CA XOsoft r12.0/r12.5 are affected by a stack/ buffer overflow in the Control Service, triggered by overly long data to /entry_point.aspx or malformed requests to ws_man/xosoapapi.asmx. The root cause is insufficient boundary checking when processing HTTP/SOAP inputs, enabling a remote attacker t...
CVE-2010-1222
CVE-2010-1222 affects CA XOsoft r12.5. The root cause is a lack of authentication, allowing unauthenticated SOAP requests to obtain potentially sensitive information (information disclosure). References indicate the issue affects XOsoft 12.5 products and CA issued patches (RO15016) for r12.5 prod...
CVE-2010-1222
CA XOsoft r12.5 does not properly perform authentication, which allows remote attackers to obtain potentially sensitive information via a SOAP request...
CA20100406-01: Security Notice for CA XOsoft
-----BEGIN PGP SIGNED MESSAGE----- CA20100406-01: Security Notice for CA XOsoft Issued: April 6, 2010 CA's support is alerting customers to multiple security risks with CA XOsoft products. Multiple vulnerabilities exist that can allow a remote attacker to gain sensitive information, cause a denia...
Mozilla Warns of Unknown Root Certificate Authority in Firefox
In a startling revelation, the open-source Mozilla project says that its flagship Firefox browser contains a root certificate authority that doesn’t seem to have a known owner. It’s quite possible that this could be a legitimate root certificate that changed hands during a merger or some other...
CA XOsoft xosoapapi.asmx Multiple Remote Code Execution Vulnerabilities
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Computer Associates XOsoft Control Replication and High Availability Control Service. Authentication is not required to exploit this vulnerability. The specific flaws exist within the...
CA ARCserve Backup Multiple Bufffer Overflow Vulnerabilities
Multiple stack-based buffer overflows in CA Computer Associates BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allow remote attackers to execute arbitrary code via a long 1 username or 2 password to the rxrLogin command in rxRPC.dll, or a long 3 username argument to the...
CA ARCServe Backup Detection
Detection of CA ARCServe Backup for Laptops and Desktops. Copyright C 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it...
CA ARCserve Backup Multiple Buffer Overflow Vulnerabilities
Multiple stack-based buffer overflows in CA Computer Associates BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allow remote attackers to execute arbitrary code via a long 1 username or 2 password to the rxrLogin command in rxRPC.dll, or a long 3 username argument to the...
Mandriva Update for rootcerts MDVA-2010:100 (rootcerts)
Check for the Version of rootcerts OpenVAS Vulnerability Test Mandriva Update for rootcerts MDVA-2010:100 rootcerts Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Mandriva Update for rootcerts MDVA-2010:100 (rootcerts)
Check for the Version of rootcerts OpenVAS Vulnerability Test Mandriva Update for rootcerts MDVA-2010:100 rootcerts Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
CA Releases Updates for ARCserve Backup
CA has released updates to address vulnerabilities in the version of Java JRE bundled with ARCserve Backup. These vulnerabilities in Java JRE may allow an attacker to execute arbitrary code, bypass security restrictions, cause a denial-of-service condition, or obtain sensitive information. US-CER...
CA Multiple Products HTTP Request Buffer Overflow (CVE-2005-3190)
The Computer Associates CA BrightStor backup server product line provides facilities for integration with third party software and hardware products to consolidate storage management tasks. CA uses an XML-based interface named iSponsor/iGateway to integrate with storage management applications fr...
MDVA-2010:100 : rootcerts
The Adobe Flash plugin has https support, but only searches for SSL certificates in /etc/ssl/certs. This advisory provides a compatibility symlink at /etc/ssl/certs pointing to /etc/pki/tls/certs to remedy this problem. Additionally this advisory also brings the latest root CA certs from the...
CA20100304-01: Security Notice for CA SiteMinder
CA20100304-01: Security Notice for CA SiteMinder Issued: March 04, 2010 CA's support is alerting customers to a security risk with CA SiteMinder. Multiple cross site scripting XSS vulnerabilities exist that can allow a remote attacker to potentially gain sensitive information. CA has provided...