Update Protection against CA ARCserve Backup for Laptops and Desktops NetBackup Arbitrary File Upload Vulnerability

A security bypass vulnerability has been reported in CA ARCserve Backup for Laptops and Desktops. Computer Associates CA BrightStor ARCserve Backup for Laptops and Desktops provides backup and data recovery for remote, mobile and desktop computers. A remote attacker may exploit this vulnerability...

CA Unicenter DSM ITRM Legends ActiveX integer overflow

Overview The CA Unicenter DSM ITRM Legends ActiveX control contains an integer overflow vulnerability, which can allow a remote attacker to execute arbitrary code on a vulnerable system. Description CA Unicenter DSM ITRM Legends is an ActiveX control that is included with multiple CA products. Th...

CA ARCserve Backup for Laptops and Desktops LGServer service code execution

Added: 05/07/2008 CVE: CVE-2008-1328 BID: 28616 OSVDB: 44320 Background BrightStor ARCserve Backup for Laptops and Desktops is an automated backup solution optimized for low-bandwidth, intermittent network connections. Problem A buffer overflow vulnerability in BrightStor ARCserve Backup for...

CA ARCserve Backup for Laptops and Desktops LGServer service code execution

Added: 05/07/2008 CVE: CVE-2008-1328 BID: 28616 OSVDB: 44320 Background BrightStor ARCserve Backup for Laptops and Desktops is an automated backup solution optimized for low-bandwidth, intermittent network connections. Problem A buffer overflow vulnerability in BrightStor ARCserve Backup for...

CA ARCserve Backup for Laptops and Desktops LGServer service code execution

Added: 05/07/2008 CVE: CVE-2008-1328 BID: 28616 OSVDB: 44320 Background BrightStor ARCserve Backup for Laptops and Desktops is an automated backup solution optimized for low-bandwidth, intermittent network connections. Problem A buffer overflow vulnerability in BrightStor ARCserve Backup for...

CA BrightStor ARCserve for Laptops and Desktops LGServer Buffer Overflow

This module exploits a stack buffer overflow in Computer Associates BrightStor ARCserve Backup for Laptops & Desktops 11.1. By sending a specially crafted request, an attacker could overflow the buffer and execute arbitrary code. This module requires Metasploit: https://metasploit.com/download...

Buffer overflow

The Discovery Service casdscvc in CA ARCserve Backup 12.0.5454.0 and earlier allows remote attackers to cause a denial of service crash via a packet with a large integer value used in an increment to TCP port 41523, which triggers a buffer over-read...

CVE-2008-1984

The eTrust Common Services Transport Daemon eCSqdmn in CA Secure Content Manager 8.0.28000.511 and earlier allows remote attackers to cause a denial of service crash or CPU consumption via a malformed packet to TCP port 1882...

CVE-2008-1979

The Discovery Service casdscvc in CA ARCserve Backup 12.0.5454.0 and earlier allows remote attackers to cause a denial of service crash via a packet with a large integer value used in an increment to TCP port 41523, which triggers a buffer over-read...

Code injection

The eTrust Common Services Transport Daemon eCSqdmn in CA Secure Content Manager 8.0.28000.511 and earlier allows remote attackers to cause a denial of service crash or CPU consumption via a malformed packet to TCP port 1882...

CVE-2008-1984

The CVE-2008-1984 entry concerns CA eTrust Secure Content Manager (eCSqdmn, Transport Daemon) affected in 8.0.28000.511 and earlier. The flaw lets remote attackers cause a denial of service (crash or high CPU usage) by sending a malformed packet to TCP port 1882. The underlying root cause is rela...

CVE-2008-1979

The CVE-2008-1979 issue affects CA ARCserve Backup Discovery Service (casdscvc) in CA ARCserve Backup 12.0.5454.0 and earlier. A remote attacker can trigger a denial-of-service (crash) by sending a crafted packet that uses a large integer in an increment to TCP port 41523, resulting in a buffer o...

CVE-2008-1984

The eTrust Common Services Transport Daemon eCSqdmn in CA Secure Content Manager 8.0.28000.511 and earlier allows remote attackers to cause a denial of service crash or CPU consumption via a malformed packet to TCP port 1882...

Computer Associates Alert Notification Server opcode 23 buffer overflow

Added: 04/25/2008 CVE: CVE-2007-4620 BID: 28605 OSVDB: 44040 Background The Alert Notification Server is included with multiple Computer Associates products to provide notifications to console users. Problem The Alert Notification Server is affected by buffer overflow vulnerabilities in multiple...

Computer Associates Alert Notification Server opcode 23 buffer overflow

Added: 04/25/2008 CVE: CVE-2007-4620 BID: 28605 OSVDB: 44040 Background The Alert Notification Server is included with multiple Computer Associates products to provide notifications to console users. Problem The Alert Notification Server is affected by buffer overflow vulnerabilities in multiple...

Computer Associates Alert Notification Server opcode 23 buffer overflow

Added: 04/25/2008 CVE: CVE-2007-4620 BID: 28605 OSVDB: 44040 Background The Alert Notification Server is included with multiple Computer Associates products to provide notifications to console users. Problem The Alert Notification Server is affected by buffer overflow vulnerabilities in multiple...

Computer Associates Alert Notification Server opcode 23 buffer overflow

Added: 04/25/2008 CVE: CVE-2007-4620 BID: 28605 OSVDB: 44040 Background The Alert Notification Server is included with multiple Computer Associates products to provide notifications to console users. Problem The Alert Notification Server is affected by buffer overflow vulnerabilities in multiple...

CA eTrust Secure Content Manager eCSqdmn远程拒绝服务漏洞

BUGTRAQ ID: 28888 eTrust Secure Content Manager（eTrust SCM）是独立、统一的网关解决方案，能够帮助企业从中央管理控制台防范资料窃密以及网络和信息传递威胁。 eTrust通用服务（传输）守护程序（eCSqdmn）处理用户提交的畸形数据时存在漏洞，远程攻击者可能利用此漏洞导致服务不可用。 监听在1882端口上的eTrust通用服务（传输）守护程序（eCSqdmn）没有检查客户端所传送的32位数字，如果远程攻击者在这个位置使用了畸形值的话，就会导致服务崩溃（但几秒钟后会自动重启），或触发死循环，导致100%的CPU使用率。 Compute...

CA eTrust SCM Plaintext Login Detection

Binary data 4484.prm...

CA DSM gui_cm_ctrls ActiveX Control Vulnerability

Title: CA DSM guicmctrls ActiveX Control Vulnerability CA Advisory Date: 2008-04-15 Reported By: Greg Linares of eEye Digital Security Impact: A remote attacker can execute arbitrary code or cause a denial of service condition. Summary: CA products that implement the DSM guicmctrls ActiveX contro...