Code injection

The web console in CA formerly Computer Associates eTrust ITM Threat Manager 8.1 allows remote attackers to redirect users to arbitrary web sites via a crafted HTTP URL on port 6689...

CVE-2007-5439

CA formerly Computer Associates eTrust ITM Threat Manager 8.1 stores sensitive user information in log files with predictable names, which allows remote attackers to obtain this information via unspecified vectors...

Information disclosure

CA formerly Computer Associates eTrust ITM Threat Manager 8.1 stores sensitive user information in log files with predictable names, which allows remote attackers to obtain this information via unspecified vectors...

CVE-2007-5437

The web console in CA formerly Computer Associates eTrust ITM Threat Manager 8.1 allows remote attackers to redirect users to arbitrary web sites via a crafted HTTP URL on port 6689...

CVE-2007-5439

CVE-2007-5439 affects CA eTrust ITM (Threat Manager) 8.1. The issue is that sensitive user information is stored in log files with predictable names, allowing a remote attacker to obtain the data via unspecified vectors. This is stated across the CVE records, including NVD, and connected document...

CVE-2007-5437

The web console in CA formerly Computer Associates eTrust ITM Threat Manager 8.1 allows remote attackers to redirect users to arbitrary web sites via a crafted HTTP URL on port 6689...

CVE-2007-5439

CA formerly Computer Associates eTrust ITM Threat Manager 8.1 stores sensitive user information in log files with predictable names, which allows remote attackers to obtain this information via unspecified vectors...

CVE-2007-5435

The CVE refers to CA ERwin Process Modeler (formerly AllFusion Process Modeler) 7.2 with an unspecified vulnerability that could allow user‑assisted remote attackers to cause a denial of service via a crafted Data Standards File (Datatype Standards File). The available details confirm the affecte...

CVE-2007-5437

The CVE-2007-5437 entry affects CA eTrust ITM (Threat Manager) 8.1, where the web console allows remote attackers to redirect users to arbitrary web sites by supplying a crafted HTTP URL targeting port 6689. This describes a client redirection vulnerability in the web interface, with no explicit ...

CVE-2007-5331

Queue.dll for the message queuing service LQserver.exe in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows remote attackers to execute arbitrary code via a malformed ONRPC protocol request for operation 0x76, which causes ARCserve Backup to dereference...

Memory corruption

Unspecified vulnerability in dbasvr in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, has unknown impact and attack vectors related to memory corruption...

CVE-2007-5325

Multiple buffer overflows in 1 the Message Engine and 2 AScore.dll in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2007-5327

Stack-based buffer overflow in the RPC interface for the Message Engine mediasvr.exe in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows remote attackers to execute arbitrary code via a long argument in the 0x10d opnum...

CVE-2007-5328

The Message Engine RPC service in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows attackers to execute arbitrary code by using certain "insecure method calls" to modify the file system and registry, aka "Privileged function exposure."...

CVE-2007-5329

Unspecified vulnerability in dbasvr in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, has unknown impact and attack vectors related to memory corruption...

Design/Logic Flaw

Queue.dll for the message queuing service LQserver.exe in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows remote attackers to execute arbitrary code via a malformed ONRPC protocol request for operation 0x76, which causes ARCserve Backup to dereference...

Memory corruption

Multiple unspecified vulnerabilities in 1 mediasvr and 2 caloggerd in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, have unknown impact and attack vectors related to memory corruption...

Stack overflow

Stack-based buffer overflow in the RPC interface for the Message Engine mediasvr.exe in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows remote attackers to execute arbitrary code via a long argument in the 0x10d opnum...

CVE-2007-5330

The cadbd RPC service in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows remote attackers to 1 execute arbitrary code via stack-based buffer overflows in unspecified RPC procedures, and 2 trigger memory corruption related to the use of "handle" RPC arguments...

Buffer overflow

Multiple buffer overflows in 1 RPC and 2 rpcx.dll in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allow remote attackers to execute arbitrary code via unspecified vectors...