CA eSCC r8/1.0 / eTrust Audit r8/1.5 - Web Server Full Path Disclosure

source: https://www.securityfocus.com/bid/20139/info CA eTrust Security Command Center eSCC and eTrust Audit are prone to multiple vulnerabilities, including: - an information-disclosure issue - an arbitrary-file-deletion issue - a replay issue. These vulnerabilities occur because the software...

CentOS 3 / 4 : openssl (CESA-2006:0661)

Updated OpenSSL packages are now available to correct a security issue. This update has been rated as having important security impact by the Red Hat Security Response Team. The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management...

OpenSSL, AMD64 x86 emulation base libraries: RSA signature forgery

Background OpenSSL is a toolkit implementing the Secure Sockets Layer, Transport Layer Security protocols and a general-purpose cryptography library. The x86 emulation base libraries for AMD64 contain a vulnerable version of OpenSSL. Description Daniel Bleichenbacher discovered that it might be...

Important: Red Hat Security Advisory: openssl security update

Updated OpenSSL packages are now available to correct a security issue. This update has been rated as having important security impact by the Red Hat Security Response Team. The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management...

FreeBSD : globus -- Multiple tmpfile races (5039ae61-2c9f-11db-8401-000ae42e9b93)

The Globus Alliance reports : The proxy generation tool grid-proxy-init creates the file, secures the file to provide access only to owner and writes proxy to the file. A race condition exists between the opening of the proxy credentials file, and making sure it is safe file to write to. The chec...

CAID 34509 - CA eTrust Antivirus WebScan vulnerabilities

Title: CA eTrust Antivirus WebScan vulnerabilities CA Vulnerability ID CAID: 34509 CA Advisory Date: 2006-08-03 Discovered By: Matt Murphy of the TippingPoint Security Research Team Impact: Remote attacker can execute arbitrary code. Summary: Ca eTrust Antivirus WebScan is a free, web-based virus...

CVE-2006-3977

Unspecified vulnerability in CA eTrust Antivirus WebScan before 1.1.0.1048 has unknown impact and remote attackers related to "improper processing of outdated WebScan components."...

CVE-2006-3976

Unspecified vulnerability in CA eTrust Antivirus WebScan before 1.1.0.1048 allows remote attackers to install arbitrary files...

CVE-2006-3975

Unspecified vulnerability in CA eTrust Antivirus WebScan allows remote attackers to execute arbitrary code due to "improper bounds checking when processing certain user input."...

CVE-2006-3977

CVE-2006-3977 concerns CA eTrust Antivirus WebScan prior to 1.1.0.1048. The vulnerability arises in the WebScan update mechanism: it downloads a manifest and update files without verifying authenticity or timestamps, enabling an attacker to push an extremely outdated but legitimate file version, ...

CVE-2006-3977

Unspecified vulnerability in CA eTrust Antivirus WebScan before 1.1.0.1048 has unknown impact and remote attackers related to "improper processing of outdated WebScan components."...

CVE-2006-3976

Unspecified vulnerability in CA eTrust Antivirus WebScan before 1.1.0.1048 allows remote attackers to install arbitrary files...

CVE-2006-3975

CVE-2006-3975 affects Computer Associates’ eTrust Antivirus WebScan ActiveX component. The root cause is missing bounds checking during processing of update manifests (filelist.txt) delivered by the WebScan update mechanism, which could enable remote code execution when a user visits a malicious ...

CVE-2006-3975

Unspecified vulnerability in CA eTrust Antivirus WebScan allows remote attackers to execute arbitrary code due to "improper bounds checking when processing certain user input."...

CVE-2006-3976

CVE-2006-3976 affects Computer Associates eTrust Antivirus WebScan ActiveX in WebScan before 1.1.0.1048. The flaw occurs during the automatic update process: WebScan downloads a filelist.txt from a supplied update path (SigUpdatePathFTP/HTTP) and decompresses listed files without verifying authen...

KLA10095 Vulnerability in CA Antivirus WebScan

An nnspecified vulnerability was found in CA Antivirus WebScan. By exploiting this vulnerability malicious users can c cause an undefined impact. This vulnerability can be exploited remotely. Original advisories - Related products CA-eTrust-Antivirus-WebScan-ActiveX-Control CVE list CVE-2006-3977...

CA Integrated Threat Management, eTrust Antivirus, eTrust PestPatrol format string vulnerability

Format string bug in job description field...

CAID 34325 - CA ITM, eAV, ePP scan job description field format string vulnerability

Title: CAID 34325 - CA ITM, eAV, ePP scan job description field format string vulnerability CA Vulnerability ID: 34325 CA Advisory Date: 2006-06-26 Discovered By: Deral Heiland www.layereddefense.com Impact: Attackers can cause a denial of service condition or possibly execute arbitrary code...

CVE-2006-3223

The CVE-2006-3223 issue affects CA ITM, eTrust Antivirus (eAV), and eTrust PestPatrol (ePP) version 8.0. It is a format string vulnerability in the scan job description field that can crash the process and potentially execute arbitrary code. The vulnerability arises from improper handling of form...

CVE-2006-3223

Format string vulnerability in CA Integrated Threat Management ITM, eTrust Antivirus eAV, and eTrust PestPatrol ePP r8 allows attackers to cause a denial of service crash and possibly execute arbitrary code via a scan job with format strings in the description field...