CVE-2004-1697

The CVE-2004-1697 issue affects CA Unicenter Management Portal versions 2.0 and 3.1, where the Forgot your Password link reveals different error messages for existing vs non-existing usernames, enabling remote username guessing. Underlying cause is information disclosure through authentication er...

CVE-2004-1697: Undefined Security Weakness

The "Forgot your Password" link in Computer Associates CA Unicenter Management Portal 2.0 and 3.1 displays different error messages for users that exist and users that do not exist, which could allow remote attackers to guess valid usernames...

cabrightstor_disco_servicepc.pm

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

cabrightstor_disco.pm

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

CA BrightStor Discovery Service TCP Overflow

This module exploits a vulnerability in the CA BrightStor Discovery Service. This vulnerability occurs when a specific type of request is sent to the TCP listener on port 41523. This vulnerability was discovered by cybertronicatgmx.net and affects all known versions of the BrightStor product. Thi...

CA BrightStor ARCserve/Enterprise Backup Persistent Default Administrator Account

The remote host is running UniversalAgent, an agent used by BrightStor ARCserve to perform backups. The remote version of this agent contains a default account with the username '\x02root\x03' and password '\x02%j8U+Ri\x03'. An attacker may use this account to gain full access to the remote host....

CA BrightStor ARCserve Backup - Remote Buffer Overflow (PoC)

/ BrightStor ARCserve Backup buffer overflow PoC [email protected] / include include include include include include define RED "\E31m\E1m" define GREEN "\E32m\E1m" define YELLOW "\E33m\E1m" define BLUE "\E34m\E1m" define NORMAL "\Em" define PORT 41523 void start int s char buffer4096; bzero...

CA BrightStor ARCserve Backup Remote Buffer Overlow PoC

Exploit for linux platform in category dos / poc ======================================================= CA BrightStor ARCserve Backup Remote Buffer Overlow PoC ======================================================= / BrightStor ARCserve Backup buffer overflow PoC email protected / include inclu...

CA BrightStor ARCserve Backup Remote Buffer Overlow PoC

No description provided by source. / BrightStor ARCserve Backup buffer overflow PoC [email protected] / include stdio.h include sys/types.h include sys/stat.h include fcntl.h include netinet/in.h include netdb.h define RED "\E31m\E1m" define GREEN "\E32m\E1m" define YELLOW "\E33m\E1m" define BL...

CVE-2004-2478

Unspecified vulnerability in Jetty HTTP Server, as used in 1 IBM Trading Partner Interchange before 4.2.4, 2 CA Unicenter Web Services Distributed Management WSDM before 3.11, and possibly other products, allows remote attackers to read arbitrary files via a .. dot dot in the URL...

CA BrightStor Discovery Service Stack Buffer Overflow

This module exploits a vulnerability in the CA BrightStor Discovery Service. This vulnerability occurs when a large request is sent to UDP port 41524, triggering a stack buffer overflow. Module Options msf use exploit/windows/brightstor/discovery/udp msf undefinedudp show actions ...actions... ms...

SOL1618 - Multiple SNMP vulnerabilities CA-2002-03

Information about this advisory is available at the following location:...

CA Unicenter privilege escalation

No description provided...

CVE-2004-0933: Undefined Security Weakness

Computer Associates CA InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content Manager, eTrust Intrusion Detection, EZ-Armor 2.0 through 2.4, and EZ-Antivirus 6.1 through 6.3 allow remote attackers to bypass antivirus protection v...

CA UniCenter Management Portal Username Enumeration Vulnerability

CA UniCenter Management Portal Username Enumeration Vulnerability Package: CA UniCenter Management Portal Vendor Web Site: http://www.ca.com Versions: UniCenter Management Portal 2.0 and 3.1 Platform: Windows Local: No Remote: Yes Fix Available: Yes Advisory Author: Thomas Adams...

CVE-2004-1697

The "Forgot your Password" link in Computer Associates CA Unicenter Management Portal 2.0 and 3.1 displays different error messages for users that exist and users that do not exist, which could allow remote attackers to guess valid usernames...

CVE-2002-1407

TinySSL 1.02 and earlier does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack...

CVE-2004-0758

Mozilla 1.5 through 1.7 allows a CA certificate to be imported even when their DN is the same as that of the built-in CA root certificate, which allows remote attackers to cause a denial of service to SSL pages because the malicious certificate is treated as invalid...

CA eTrust SCM Detection

Binary data 4534.prm...

CVE-2004-0758

Mozilla 1.5 through 1.7 allows a CA certificate to be imported even when their DN is the same as that of the built-in CA root certificate, which allows remote attackers to cause a denial of service to SSL pages because the malicious certificate is treated as invalid...