CA License Server (GETCONFIG) Remote Buffer Overflow Exploit (c)

No description provided by source. / Computer-Associates, License Service Stack Overflow Homepage: ca.com Affected version: v1.61 and below in eTrust, Unicenter, BrightStor, etc.. Patched version: hotfix Link: ca.com Date: 04 March 2005 Application Risk: Tsunami Internet Risk: High Dicovery...

CA License Server - GETCONFIG Remote Buffer Overflow

CA License Server - GETCONFIG Remote Buffer Overflow / Computer-Associates, License Service Stack Overflow Homepage: ca.com Affected version: v1.61 and below in eTrust, Unicenter, BrightStor, etc.. Patched version: hotfix Link: ca.com Date: 04 March 2005 Application Risk: Tsunami Internet Risk:...

calicclnt_getconfig.pm

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

calicserv_getconfig.pm

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

CVE-2005-0641

CVE-2005-0641 affects the CA Unicenter Asset Management Reporter (UAM) 4.0, where a flaw in report templates (fields: name and description) enables cross-site scripting (XSS). The root cause is a vulnerability in how the report template content is handled, allowing remote attackers to inject arbi...

CVE-2005-0642

SQL injection vulnerability in the Query Designer for Computer Associates CA Unicenter Asset Management UAM 4.0 allows remote attackers to execute arbitrary SQL via an imported file...

CVE-2005-0640

Computer Associates CA Unicenter Asset Management UAM 4.0 does not properly initialize the "Change Credentials for Database" window, which allows local users to recover the SQL Admin password via certain methods...

CVE-2005-0640

CA Unicenter Asset Management (UAM) 4.0 contains a flaw where the "+Change Credentials for Database" window is not properly initialized, enabling local users to recover the SQL Admin password. The root cause is improper window initialization, per the CVE entry. The documented impact is partial co...

CVE-2005-0642

The CVE-2005-0642 issue affects CA Unicenter Asset Management (UAM) 4.0, specifically the Query Designer component. The vulnerability is a SQL injection that allows remote attackers to execute arbitrary SQL through an imported file. The root cause is improper handling of input in the Query Design...

CVE-2005-0641: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the Reporter for Computer Associates CA Unicenter Asset Management UAM 4.0 allows remote attackers to inject arbitrary HTML or web script via the 1 name or 2 description in a report template...

CVE-2005-0583

Directory traversal vulnerability in Computer Associates CA License Client 0.1.0.15 allows remote attackers to create arbitrary files via .. dot dot sequences in a PUTOLF request...

CVE-2005-0583

CVE-2005-0583 concerns the CA License Client 0.1.0.15, where a directory traversal via PUTOLF requests can create arbitrary files across the host. Public sources (NVD/NVD-derived entries and iDEFENSE advisory) confirm the vulnerability exists in CA License Client/Server components and note that a...

CVE-2005-0641

Cross-site scripting XSS vulnerability in the Reporter for Computer Associates CA Unicenter Asset Management UAM 4.0 allows remote attackers to inject arbitrary HTML or web script via the 1 name or 2 description in a report template...

CVE-2005-0582

Buffer overflow in Computer Associates CA License Client 0.1.0.15 allows remote attackers to execute arbitrary code via a long filename in a PUTOLF request...

CVE-2005-0582

CVE-2005-0582 describes a buffer overflow in Computer Associates License Client 0.1.0.15 (License Client/Server) that can be triggered by a long filename in a PUTOLF request, allowing remote code execution with SYSTEM/root privileges on affected platforms. Connected advisories confirm a CA Licens...

CVE-2005-0581

Summary of vulnerability facts (CVE-2005-0581) : The CA License Client/Server/GCR components used in CA BrightStor ARCserve Backup 11.0 (and related CA License Server/Client software) are affected by a stack/buffer overflow when processing certain malformed or overly long GCR messages and GETCONF...

CVE-2005-0583: Undefined Security Weakness

Directory traversal vulnerability in Computer Associates CA License Client 0.1.0.15 allows remote attackers to create arbitrary files via .. dot dot sequences in a PUTOLF request...

Computer Associates License Client GETCONFIG Overflow

This module exploits a vulnerability in the CA License Client service. This exploit will only work if your IP address can be resolved from the target system point of view. This can be accomplished on a local network by running the 'nmbd' service that comes with Samba. If you are running this...

Computer Associates License Server GETCONFIG Overflow

This module exploits an vulnerability in the CA License Server network service. By sending an excessively long GETCONFIG packet the stack may be overwritten. Module Options msf use exploit/windows/license/calicserv/getconfig msf undefinedgetconfig show actions ...actions... msf undefinedgetconfig...

CVE-2005-0582: Undefined Security Weakness

Buffer overflow in Computer Associates CA License Client 0.1.0.15 allows remote attackers to execute arbitrary code via a long filename in a PUTOLF request...