[ELEYTT] 10PAZDZIERNIK2007

Eleytt Research www.eleytt.com Overview: ==================== Michal Bucko, Eleytt, www.eleytt.com/michal.bucko Tomasz Polis, www.eleytt.com Credit: ==================== Michal Bucko, Eleytt, www.eleytt.com/michal.bucko Vulnerability Table =================== 1. CA Erwin Datatype Standards File...

CA eTrust Intrusion Detection CallCode ActiveX Control Code Execution (CVE-2007-3302)

A remote code execution vulnerability has been reported in CA eTrust Intrusion Detection. CA eTrust Intrusion Detection is a network intrusion management and prevention system, that includes real-time session monitoring and Internet web filtering capabilities. A remote attacker could exploit this...

TPTI-07-17: CA BrightStor Hierarchical Storage Manager SQL Injection Vulnerabilities

TPTI-07-17: CA BrightStor Hierarchical Storage Manager SQL Injection Vulnerabilities http://dvlabs.tippingpoint.com/advisory/TPTI-07-17.html October 2, 2007 -- CVE ID: CVE-2007-5084 -- Affected Vendor: Computer Associates -- Affected Products: BrightStor Hierarchical Storage Manager r11.5 --...

CA BrightStor HSM Engine Detection (UDP)

The remote service is a BrightStor HSM Engine, the engine component of BrightStor Hierarchical Storage Manager, which is used to manage files on the remote host as part of an enterprise-grade tiered storage solution. C Tenable Network Security, Inc. include"compat.inc"; if description...

Command injection

Multiple command handlers in CA Computer Associates BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 do not verify if a peer is authenticated, which allows remote attackers to add and delete users, and start client restores...

Directory traversal

Directory traversal vulnerability in rxRPC.dll in CA Computer Associates BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allows remote attackers to upload and overwrite arbitrary files via a ..\ dot dot backslash sequence in the destination filename argument to sub-functio...

CVE-2007-5004

Integer overflow in CA Computer Associates BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allows remote attackers to execute arbitrary code via a long username and a certain "useless" password...

CVE-2007-5005

Directory traversal vulnerability in rxRPC.dll in CA Computer Associates BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allows remote attackers to upload and overwrite arbitrary files via a ..\ dot dot backslash sequence in the destination filename argument to sub-functio...

CVE-2007-5003

Multiple stack-based buffer overflows in CA Computer Associates BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allow remote attackers to execute arbitrary code via a long 1 username or 2 password to the rxrLogin command in rxRPC.dll, or a long 3 username argument to the...

DSquare Exploit Pack: D2SEC_CABLD

Name| d2seccabld ---|--- CVE| CVE-2007-5006 Exploit Pack| D2ExploitPack Description| CA BrightStor ARCserve Backup for Laptops & Desktops r11.5 LGServer Stack Overflow Notes|...

CVE-2007-5082

CVE-2007-5082 describes multiple stack-based buffer overflows in Computer Associates’ BrightStor HSM prior to r11.6, affecting the CsAgent service over TCP. A remote attacker can cause arbitrary code execution by sending crafted CsAgent commands with certain opcodes, due to missing validation of ...

CVE-2007-5003

CVE-2007-5003 concerns multiple stack-based buffer overflows in CA BrightStor ARCserve Backup for Laptops and Desktops, affecting r11.0 through r11.5. The vulnerability arises in the rxRPC.dll routines rxrLogin (long username and long password) and GetUserInfo (long username), allowing remote att...

CVE-2007-5005

Directory traversal vulnerability in rxRPC.dll in CA Computer Associates BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allows remote attackers to upload and overwrite arbitrary files via a ..\ dot dot backslash sequence in the destination filename argument to sub-functio...

CVE-2007-5084

CA BrightStor Hierarchical Storage Manager (HSM) before r11.6 is affected by multiple SQL injection vulnerabilities in the CsAgent service. The flaws reside in the CsAgent opcode handling, where certain commands (notably opcodes 0x07, 0x08, 0x09, 0x1E, 0x32, 0x36, 0x40 and possibly others) fail t...

CVE-2007-5006

CA ARCserve Backup for Laptops and Desktops (L&D) versions r11.0–r11.5 are affected by CVE-2007-5006, an authentication-bypass flaw in the LGServer/rxRPC interface over TCP/1900. The vulnerability arises from command handlers that do not verify peer authentication, enabling remote attackers to ad...

CVE-2007-5006

Multiple command handlers in CA Computer Associates BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 do not verify if a peer is authenticated, which allows remote attackers to add and delete users, and start client restores...

CVE-2007-5003

Multiple stack-based buffer overflows in CA Computer Associates BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allow remote attackers to execute arbitrary code via a long 1 username or 2 password to the rxrLogin command in rxRPC.dll, or a long 3 username argument to the...

CVE-2007-5004

Integer overflow in CA Computer Associates BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allows remote attackers to execute arbitrary code via a long username and a certain "useless" password...

CVE-2007-5005

CVE-2007-5005 affects CA ARCserve Backup for Laptops and Desktops, specifically rxRPC.dll in the rxrReceiveFileFromServer function, with r11.0–r11.5 susceptible. The vulnerability arises from directory traversal using a ..\ sequence in the destination filename, allowing a remote attacker to uploa...

[CAID 35690, 35691, 35692]: CA BrightStor Hierarchical Storage Manager CsAgent Multiple Vulnerabilities

Title: CAID 35690, 35691, 35692: CA BrightStor Hierarchical Storage Manager CsAgent Multiple Vulnerabilities CA Vuln ID CAID: 35690, 35691, 35692 CA Advisory Date: 2007-09-26 Reported By: Sean Larsson, iDefense Labs anonymous researcher working with the iDefense VCP Aaron Portnoy of DV Labs...