4679 matches found
CA BrightStor ARCserve (tapeeng.exe) Remote Buffer Overflow Expl
Exploit for unknown platform in category remote exploits =================================================================== CA BrightStor ARCserve tapeeng.exe Remote Buffer Overflow Exploit =================================================================== !/usr/bin/python Remote exploit for...
CVE-2006-6917
Multiple buffer overflows in Computer Associates CA BrightStor ARCserve Backup R11.5 Server before SP2 allows remote attackers to execute arbitrary code in the Tape Engine tapeeng.exe via a crafted RPC request with 1 opnum 38, which is not properly handled in TAPEUTIL.dll 11.5.3884.0, or 2 opnum...
CVE-2006-6641
CA CleverPath Portal before maintenance 4.71.001_179_060830 (and related products BrightStor Portal r11.1, CleverPath Aion BPM r10–r10.2, eTrust Security Command Center r1/r8, Unicenter) is affected by a vulnerability where multiple Portal servers sharing a single data store can cause a Portal us...
CVE-2006-6641: Undefined Security Weakness
Unspecified vulnerability in CA CleverPath Portal before maintenance version 4.71.001179060830, as used in multiple products including BrightStor Portal r11.1, CleverPath Aion BPM r10 through r10.2, eTrust Security Command Center r1 and r8, and Unicenter, does not properly handle when multiple...
CA Anti-Virus多个驱动本地拒绝服务漏洞
CA Anti-Virus是一款杀毒软件。 CA Anti-Virus的vetfddnt.sys和vetmonnt.sys驱动没有正确地处理空缓冲区，允许本地攻击者通过一些IOCTL（METHODBUFFERED）操作导致蓝屏死机。 Computer Associates Anti-Virus for Vista Beta v8.2 Computer Associates Anti-Virus 2007 v8.1 Computer Associates Internet Security Suite 2007 v3.0 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
CA Anti-Virus multiple DoS conditions
Multiple NULL pointer dereferences...
[Full-disclosure] [CAID 34870]: CA Anti-Virus vetfddnt.sys, vetmonnt.sys Local Denial of Service Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: CAID 34870: CA Anti-Virus vetfddnt.sys, vetmonnt.sys Local Denial of Service Vulnerabilities CA Vulnerability ID CAID: 34870 CA Advisory Date: 2006-12-13 Discovered By: Ruben Santamarta reversemode.com Impact: Local unprivileged attacker can...
CVE-2006-6496
The 1 VetMONNT.sys and 2 VetFDDNT.sys drivers in CA Anti-Virus 2007 8.1, Anti-Virus for Vista Beta 8.2, and CA Internet Security Suite 2007 v3.0 do not properly handle NULL buffers, which allows local users with administrative access to cause a denial of service system crash via certain IOCTLs...
CVE-2006-6496
CA vulnerability CVE-2006-6496 affects CA Anti-Virus 2007 v8.1, CA Anti-Virus for Vista Beta 8.2, and CA Internet Security Suite 2007 v3.0, due to improper handling of NULL buffers in VetMONNT.sys and VetFDDNT.sys that allows a local administrator to crash the system via certain IOCTLs. The issue...
CVE-2006-6496: Undefined Security Weakness
The 1 VetMONNT.sys and 2 VetFDDNT.sys drivers in CA Anti-Virus 2007 8.1, Anti-Virus for Vista Beta 8.2, and CA Internet Security Suite 2007 v3.0 do not properly handle NULL buffers, which allows local users with administrative access to cause a denial of service system crash via certain IOCTLs...
CVE-2006-6379
Buffer overflow in the BrightStor Backup Discovery Service in multiple CA products, including ARCserve Backup r11.5 SP1 and earlier, ARCserve Backup 9.01 up to 11.1, Enterprise Backup 10.5, and CA Server Protection Suite r2, allows remote attackers to execute arbitrary code via unspecified vector...
CVE-2006-6379
CVE-2006-6379 affects the BrightStor ARCserve Backup Discovery Service. A buffer overflow in the ASBRDCST.DLL discovery component allows remote attackers to execute arbitrary code via specially crafted packets sent to the Discovery Service. Affected products include BrightStor ARCserve Backup (r1...
CVE-2006-6379: Undefined Security Weakness
Buffer overflow in the BrightStor Backup Discovery Service in multiple CA products, including ARCserve Backup r11.5 SP1 and earlier, ARCserve Backup 9.01 up to 11.1, Enterprise Backup 10.5, and CA Server Protection Suite r2, allows remote attackers to execute arbitrary code via unspecified vector...
CVE-2006-6076
Buffer overflow in the Tape Engine tapeeng.exe in CA formerly Computer Associates BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to execute arbitrary code via certain RPC requests to TCP port 6502...
CVE-2006-6076
Summary: CVE-2006-6076 is a buffer overflow in CA BrightStor ARCserve Backup’s Tape Engine (tapeeng.exe) that can be triggered by remote RPC requests over TCP port 6502, leading to potentially remote code execution on affected systems. Affected products include BrightStor ARCserve Backup versions...
CVE-2006-6076
Buffer overflow in the Tape Engine tapeeng.exe in CA formerly Computer Associates BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to execute arbitrary code via certain RPC requests to TCP port 6502...
CA BrightStor ARCserve Backup buffer overflow
Buffer overflow on parsing TCP/6502 data...
CA多个产品驱动本地权限提升漏洞
Computer Associates是世界领先的安全厂商，产品包括多种杀毒软件及备份恢复系统。 CA HIPS产品的驱动在实现上存在问题，本地攻击者可能利用此漏洞提升权限。 CA的HIPS Core（KmxStart.sys）和HIPS Firewall（KmxFw.sys）驱动hook了TDI和NDIS。本地非特权用户可以使用一些特权IOCTL覆盖这些驱动中的函数指针，以Ring0权限执行任意代码。 Computer Associates Personal Firewall 2007 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...
CA BrightStor ARCserve Tape Engine Buffer Overflow
This module exploits a stack buffer overflow in Computer Associates BrightStor ARCserve Backup r11.1 - r11.5. By sending a specially crafted DCERPC request, an attacker could overflow the buffer and execute arbitrary code. Module Options msf use exploit/windows/brightstor/tape/engine msf...