CVE-2007-1345

CVE-2007-1345 affects CA eTrust Admin (GINA component) cube.exe in versions 8.1.0–8.1.2. It allows attackers with physical interactive access or Remote Desktop to bypass authentication and escalate privileges via the password-reset interface. Root cause: privilege-escalation in the reset workflow...

CVE-2007-1345

Unspecified vulnerability in cube.exe in the GINA component for CA Computer Associates eTrust Admin 8.1.0 through 8.1.2 allows attackers with physical interactive or Remote Desktop access to bypass authentication and gain privileges via the password reset interface...

CA eTrust privilege escalation

GINA password reset interface privilege escalation...

Heap overflow

Heap-based buffer overflow in SW3eng.exe in the eID Engine service in CA formerly Computer Associates eTrust Intrusion Detection 3.0.5.57 and earlier allows remote attackers to cause a denial of service application crash via a long key length value to the remote administration port 9191/tcp...

CVE-2007-1005

Heap-based buffer overflow in SW3eng.exe in the eID Engine service in CA formerly Computer Associates eTrust Intrusion Detection 3.0.5.57 and earlier allows remote attackers to cause a denial of service application crash via a long key length value to the remote administration port 9191/tcp...

CVE-2007-1005

CA eTrust Intrusion Detection (eID) is affected by CVE-2007-1005. A heap-based buffer/overrun occurs in SW3eng.exe within the eID Engine service when handling session keys for remote administration on port 9191/tcp, allowing a remote unauthenticated attacker to cause a denial of service (applicat...

CVE-2007-1005

Heap-based buffer overflow in SW3eng.exe in the eID Engine service in CA formerly Computer Associates eTrust Intrusion Detection 3.0.5.57 and earlier allows remote attackers to cause a denial of service application crash via a long key length value to the remote administration port 9191/tcp...

Null pointer dereference

The RPC Server service catirpc.exe in CA formerly Computer Associates BrightStor ARCserve Backup 11.5 SP2 and earlier allows remote attackers to cause a denial of service service crash via a crafted TADDR2UADDR that triggers a null pointer dereference in catirpc.dll, possibly related to null...

CVE-2007-0816

The RPC Server service catirpc.exe in CA formerly Computer Associates BrightStor ARCserve Backup 11.5 SP2 and earlier allows remote attackers to cause a denial of service service crash via a crafted TADDR2UADDR that triggers a null pointer dereference in catirpc.dll, possibly related to null...

CVE-2007-0816

CVE-2007-0816 affects CA BrightStor ARCserve Backup 11.5 SP2 and earlier; the RPC Server (catirpc.dll) can be remotely triggered via a crafted TADDR2UADDR to cause a null pointer dereference, leading to a denial of service. Vulnerable component: catirpc.dll in the RPC Server service; attack path ...

CVE-2007-0816

The RPC Server service catirpc.exe in CA formerly Computer Associates BrightStor ARCserve Backup 11.5 SP2 and earlier allows remote attackers to cause a denial of service service crash via a crafted TADDR2UADDR that triggers a null pointer dereference in catirpc.dll, possibly related to null...

CA Products Discovery Service Remote Buffer Overflow (CVE-2006-6379)

Computer Associates CA BrightStor ARCserve Backup and Business Protection Suite provide data protection and integrated backup and recovery solution for Windows, NetWare, Linux and UNIX environments. The vulnerability is due to a flaw in the Discovery Service component of the affected products. An...

CA BrightStor ARCserve Backup catirpc.exe远程拒绝服务漏洞

BrightStor ARCserve Backup可为各种平台的服务器提供备份和恢复保护功能。 BrightStor ARCserve Backup的CATIRPC.EXE进程在处理畸形用户请求时存在漏洞，远程攻击者可能利用此漏洞导致进程崩溃。 BrightStor ARCserve Backup在处理CA远程过程调用服务器（CATIRPC.EXE）服务的TADDR2UADDR（0x08）请求字节时存在空指针引用。如果攻击者向111/UDP端口发送了特制报文的话，就可以触发这个漏洞，导致服务崩溃。 Computer Associates BrightStor ARCserve Back...

CA BrightStor ARCserve for Laptops and Desktops LGServer Buffer Overflow

This module exploits a stack buffer overflow in Computer Associates BrightStor ARCserve Backup for Laptops & Desktops 11.1. By sending a specially crafted request, an attacker could overflow the buffer and execute arbitrary code. This module requires Metasploit: https://metasploit.com/download...

CheckPoint FireWall-1 information leak

It's possible to retrieve certificate revocation least from internal CA port TCP/18246...

CA BrightStor ARCServe BackUp LGServer远程栈溢出漏洞

BrightStor ARCserve Backup可为各种平台的服务器提供备份和恢复保护功能。 BrightStor ARCserve Backup的LGSERVER.EXE在处理畸形请求数据时存在漏洞，远程攻击者可能利用此漏洞控制服务器。 如果发送给监听于TCP/1900端口上LGSERVER.EXE服务的报文格式如下： ddddddddddxxxxxxxxxxxxxxxxxxxxx 这里dddddddddd是10个字符长0填充的十进制值，等于xxxxxxxxxxxxxxxxxxxxx...

CA BrightStor ARCserve (lgserver.exe) Remote Stack Overflow Exploit

No description provided by source. !/usr/bin/python Remote exploit for the CA BrightStor Arcserve stack overflow as described in http://www.securityfocus.com/archive/1/458648/30/0/threaded Winny Thomas ;- Author shall bear no responsibility for any screw ups caused by using this code import os...

Remote Unauthenticated Code Execution CA BrightStor ARCserve Backup

======= Summary ======= Today: 31 January 2007 Reference: NGS00404 Discover: Mark Litchfield Name: Remote Unauthenticated Code Execution CA BrightStor ARCserve Backup for Laptops & Desktops Vendor: Computer Associates Systems Affected: BrightStor ARCserve Backup for Laptops & Desktops r11.1 Risk:...

CA BrightStor ARCserve - lgserver.exe Remote Stack Overflow

CA BrightStor ARCserve - lgserver.exe Remote Stack Overflow !/usr/bin/python Remote exploit for the CA BrightStor Arcserve stack overflow as described in http://www.securityfocus.com/archive/1/458648/30/0/threaded Winny Thomas ;- Author shall bear no responsibility for any screw ups caused by usi...

CA BrightStor ARCserve (lgserver.exe) Remote Stack Overflow Exploit

Exploit for unknown platform in category remote exploits =================================================================== CA BrightStor ARCserve lgserver.exe Remote Stack Overflow Exploit =================================================================== !/usr/bin/python Remote exploit for th...