SOL1989 - Apache/mod_ssl Worm vulnerability CA-2002-27

CERT Advisory CA-2002-27 reports a vulnerability that affects many operating systems. For more information about the vulnerability, refer to the following CERT website:...

CA BrightStor Backup 11.5.2.0 Mediasvr.exe Denial of Service Exploit

Exploit for unknown platform in category dos / poc ==================================================================== CA BrightStor Backup 11.5.2.0 Mediasvr.exe Denial of Service Exploit ==================================================================== !/usr/bin/python Computer Associates CA...

CA BrightStor Backup 11.5.2.0 - 'caloggderd.exe' Denial of Service

!/usr/bin/python Computer Associates CA Brightstor Backup caloggderd.exe DoS camt70.dll Previously Unknown There is an issue in camt70.dll when caloggerd is processing a hostname for a login operation. When processing the string, if a null is passed in as an argument, it will be loaded into ESI a...

CA BrightStor Backup 11.5.2.0 - Mediasvr.exe Denial of Service

CA BrightStor Backup 11.5.2.0 - Mediasvr.exe Denial of Service !/usr/bin/python Computer Associates CA Brightstor Backup Mediasvr.exe DoS catirpc.dll/rwxdr.dll Previously Unknown There is an issue with RPC operation 126 and the imported cactirpc.dll and rwxdr.dll. It looks as if Mediasvr.exe...

CA BrightStor Backup 11.5.2.0 - 'Mediasvr.exe' Denial of Service

!/usr/bin/python Computer Associates CA Brightstor Backup Mediasvr.exe DoS catirpc.dll/rwxdr.dll Previously Unknown There is an issue with RPC operation 126 and the imported cactirpc.dll and rwxdr.dll. It looks as if Mediasvr.exe identifies a Bad Job Handle as seen in its log file. Log Message:...

CA BrightStor Backup 11.5.2.0 Mediasvr.exe Denial of Service Exploit

No description provided by source. !/usr/bin/python Computer Associates CA Brightstor Backup Mediasvr.exe DoS catirpc.dll/rwxdr.dll Previously Unknown There is an issue with RPC operation 126 and the imported cactirpc.dll and rwxdr.dll. It looks as if Mediasvr.exe identifies a Bad Job Handle as...

SOL1952 - Trojan Horse OpenSSH Distribution - CA-2002-24

Information about this advisory can be found at the following location:...

CA Multiple Products InoCore.dll File Mapping Manipulation Local Overflow

The version of CA Anti-Virus for the Enterprise / Threat Manager installed on the remote host is affected by a stack-based buffer overflow involving its task service, InoTask.exe. By supplying a long path to the file job's path, a local attacker can overflow a buffer in the 'QSIGetQueueID' functi...

CA eTrust antivirus multiple security vulnerabilities

Local buffer overflow in task scheduler, remote buffer overflow in antiviral server TCP/12168...

CVE-2007-2522

Stack-based buffer overflow in the inoweb Console Server in CA Anti-Virus for the Enterprise r8, Threat Manager r8, Anti-Spyware for the Enterprise r8, and Protection Suites r3 allows remote attackers to execute arbitrary code via a long 1 username or 2 password...

Stack overflow

CA Anti-Virus for the Enterprise r8 and Threat Manager r8 before 20070510 use weak permissions NULL security descriptor for the Task Service shared file mapping, which allows local users to modify this mapping and gain privileges by triggering a stack-based buffer overflow in InoCore.dll before...

Stack overflow

Stack-based buffer overflow in the inoweb Console Server in CA Anti-Virus for the Enterprise r8, Threat Manager r8, Anti-Spyware for the Enterprise r8, and Protection Suites r3 allows remote attackers to execute arbitrary code via a long 1 username or 2 password...

CVE-2007-2522

Summary (CVE-2007-2522): A stack-based buffer overflow in the CA Console Server component (InoWeb.exe) of multiple CA products (CA Anti-Virus for the Enterprise, CA Threat Manager, CA Anti-Spyware for the Enterprise, CA Protection Suites) allows remote attackers to execute arbitrary code by sendi...

CVE-2007-2523

CA Anti-Virus for the Enterprise r8 and Threat Manager r8 before 20070510 use weak permissions NULL security descriptor for the Task Service shared file mapping, which allows local users to modify this mapping and gain privileges by triggering a stack-based buffer overflow in InoCore.dll before...

CVE-2007-2523

CA Anti-Virus for the Enterprise r8 and CA Threat Manager r8 contain a local stack-based buffer overflow in InoCore.dll triggered by modifying a NULL-security-descriptor Task Service file mapping (InoTask.exe) via a crafted path. This allows a local attacker to gain SYSTEM-level privileges. The i...

CVE-2007-2522

Stack-based buffer overflow in the inoweb Console Server in CA Anti-Virus for the Enterprise r8, Threat Manager r8, Anti-Spyware for the Enterprise r8, and Protection Suites r3 allows remote attackers to execute arbitrary code via a long 1 username or 2 password...

eTrust Antivirus Agent r8 Local Privilege Elevation Exploit

Exploit for unknown platform in category local exploits =========================================================== eTrust Antivirus Agent r8 Local Privilege Elevation Exploit =========================================================== /...

CA多个eTrust产品控制台服务器及InoCore.dll远程栈缓冲区溢出漏洞

eTrust是CA推出的系列杀毒产品，现在更名为Anti-Virus for the Enterprise、Threat Manager、Anti-Spyware for the Enterprise等产品。 eTrust Antivirus的任务服务InoTask.exe使用共享的文件映射共享调度任务的信息。文件映射的安全描述符为空，这允许任意用户修复其内容。通过修改这个映射中的字符串攻击者就可以在InoTask进程中触发栈溢出，导致执行任意指令。 eTrust产品没有对控制台服务器的登录凭据执行充分的检查，远程攻击者可以通过发送特制的认证凭据触发栈溢出，导致执行任意指令。...

eTrust AntiVirus Agent r8 - Local Privilege Escalation

/ ---------------------------------------------------------------------- | 48Bits Advisory -=- Privilege Elevation in eTrust Antivirus Agent r8 | ---------------------------------------------------------------------- Affected versions : I have tested with: - eTrust Antivirus Agent r8 -...

CA eTrust AntiVirus Server inoweb Buffer Overflow Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Computer Associates AntiVirus Server. User interaction is not required to exploit this vulnerability. The specific flaw exists in the authentication function of the inoweb service that listens by default ...