Mandrake Linux Security Advisory : kernel (MDKSA-2006:040)

A number of vulnerabilities were discovered and corrected in the Linux 2.6 kernel : The udpv6getport function in udp.c, when running IPv6, allows local users to cause a Denial of Service infinite loop and crash CVE-2005-2973. The mqopen system call in certain situations can decrement a counter...

CA Multiple Products Message Queuing Multiple Remote DoS

The remote version of CA Message Queuing Service is vulnerable to two flaws that could lead to a denial of service : - Improper handling of specially crafted TCP packets on port 4105 CVE-2006-0529 - Failure to handle spoofed UDP CAM requests CVE-2006-0530 C Tenable Network Security, Inc...

Design/Logic Flaw

Computer Associates CA Message Queuing CAM / CAFT before 1.07 Build 22016 and 1.11 Build 2920, as used in multiple CA products, allows remote attackers to cause a denial of service via a crafted message to TCP port 4105...

CVE-2006-0529

CVE-2006-0529 affects Computer Associates’ CA Message Queuing (CAM/CAFT) before CAM 1.07 Build 220_16 and 1.11 Build 29_20. The issue allows a remote attacker to cause a denial of service by sending a crafted message to TCP port 4105. Public references and vendor/plugin notes confirm the DoS cond...

CVE-2006-0530

CVE-2006-0530 affects CA Message Queuing (CAM/CAFT) before 1.07 Build 220_16 and 1.11 Build 29_20. The vulnerability allows remote attackers to cause a denial of service by sending spoofed CAM control messages, impacting CA products that integrate CAM. Root cause: improper handling of spoofed CAM...

Multiple Computer Associates (CA) products vulnerabilities

DM Primer and CA Unicenter buffer overflows, multiple DM Deployment DoS conditions. iGateway buffer overflow. CA Message Queuing DoS conditions...

CA iTechnology iGateway Service Content-Length Buffer Overflow

The remote host is using CA iTechnology iGateway service, a software component used in various products from CA. The version of the iGateway service installed on the remote host reportedly fails to sanitize Content-Length HTTP header values before using them to allocate heap memory. An attacker c...

CVE-2005-3653

CVE-2005-3653 describes a heap-based buffer overflow in the CA iTechnology iGateway service, caused by insufficient boundary checks of the HTTP Content-Length header. An unauthenticated remote attacker can send a crafted HTTP request with a negative Content-Length to trigger a heap overflow, pote...

[Full-disclosure] CAID 33778 - CA iGateway Content-Length Buffer Overflow Vulnerability

Title: CAID 33778 - CA iGateway Content-Length Buffer Overflow Vulnerability CA Vulnerability ID: 33778 CA Advisory Date: 2006-01-23 Discovered By: Erika Mendoza reported this issue to iDefense. Impact: Remote attacker can execute arbitrary code with SYSTEM privileges. Summary: The CA iGateway...

Design/Logic Flaw

The DM Primer dmprimer.exe in the DM Deployment Common Component in Computer Associates CA BrightStor Mobile Backup r4.0, BrightStor ARCserve Backup for Laptops & Desktops r11.0, r11.1, r11.1 SP1, Unicenter Remote Control 6.0, 6.0 SP1, CA Desktop Protection Suite r2, CA Server Protection Suite r2...

CVE-2006-0307

The DM Primer in the DM Deployment Common Component in Computer Associates CA BrightStor Mobile Backup r4.0, BrightStor ARCserve Backup for Laptops & Desktops r11.0, r11.1, r11.1 SP1, Unicenter Remote Control 6.0, 6.0 SP1, CA Desktop Protection Suite r2, CA Server Protection Suite r2, and CA...

CVE-2006-0307

The CVE-2006-0307 issue affects the CA DM Deployment Common Component (DMPrimer) used in several CA products: BrightStor Mobile Backup r4.0, BrightStor ARCserve Backup for Laptops & Desktops (r11.0, r11.1, r11.1 SP1), Unicenter Remote Control 6.x, CA Desktop Protection Suite r2, CA Server Protect...

CVE-2006-0306

The CVE-2006-0306 vulnerability affects the DM Primer (dmprimer.exe) within the DM Deployment Common Component used by CA BrightStor Mobile Backup r4.0, CA BrightStor ARCserve Backup for Laptops & Desktops r11.0–r11.1 SP1, Unicenter Remote Control 6.0–6.0 SP1, and CA Desktop/Server Protection Sui...

CA DMPrimer Service Detection

The remote host is running the CA DMPrimer service DM Deployment Common Component. This service is bundled with products such as BrightStor ARCserve Backup for Laptops & Desktops, Unicenter Remote Control, CA Protection Suite, etc... C Tenable Network Security, Inc. include"compat.inc";...

[Full-disclosure] CAID 33756 - DM Deployment Common Component Vulnerabilities

Title: CAID 33756 - DM Deployment Common Component Vulnerabilities CA Vulnerability ID: 33756 Discovery Date: 2005-12-20 CA Advisory Date: 2006-01-17 Discovered By: Cengiz Aykanat CA internal audit, and KarmaatDesignFolksdotcomdotau. Impact: Remote attacker can cause a denial of service condition...

CVE-2006-0307

The DM Primer in the DM Deployment Common Component in Computer Associates CA BrightStor Mobile Backup r4.0, BrightStor ARCserve Backup for Laptops & Desktops r11.0, r11.1, r11.1 SP1, Unicenter Remote Control 6.0, 6.0 SP1, CA Desktop Protection Suite r2, CA Server Protection Suite r2, and CA...

CA DM Deployment Common Component Multiple DoS

The remote version of DMPrimer service CA DM Deployment Common Component is vulnerable to multiple Denial of Service attacks. An attacker can crash or may cause a high CPU utilization by sending a specially crafted UDP packets. C Tenable Network Security, Inc. include"compat.inc"; ifdescription...

[Full-disclosure] DM Primer error handling weakness & an old CAM BO revisited

Apologies for the poor grammer and formatting... DM Primer is a shared service related to CA's Unicenter Remote Control. It is used in Enterprise environments to deploy URC6 from the URC v6.x Administration server. Dmprimer.exe listens on a client device for instructions from the server in a...

CVE-2006-0306

The DM Primer dmprimer.exe in the DM Deployment Common Component in Computer Associates CA BrightStor Mobile Backup r4.0, BrightStor ARCserve Backup for Laptops & Desktops r11.0, r11.1, r11.1 SP1, Unicenter Remote Control 6.0, 6.0 SP1, CA Desktop Protection Suite r2, CA Server Protection Suite r2...

CVE-2005-4639

CVE-2005-4639: A buffer overflow in the CA-driver (dst_ca.c) for TwinHan DST Frontend/Card affects Linux kernel 2.6.12 and other versions before 2.6.15. It allows local users to crash the system and potentially execute arbitrary code by reading more than eight bytes into an eight-byte array. Publ...