TZipBuilder / Abakt / CAM UnZip / ZipCentral buffer overflow

Buffer overflow on ZIP archives parsing...

[Full-disclosure] Secunia Research: CAM UnZip ZIP File Handling Buffer Overflow Vulnerability

====================================================================== Secunia Research 19/05/2006 - CAM UnZip ZIP File Handling Buffer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

CVE-2006-2161

Buffer overflow in 1 TZipBuilder 1.79.03.01, 2 Abakt 0.9.2 and 0.9.3-beta1, 3 CAM UnZip 4.0 and 4.3, and possibly other products, allows user-assisted attackers to execute arbitrary code via a ZIP archive that contains a file with a long file name...

Buffer overflow

Buffer overflow in 1 TZipBuilder 1.79.03.01, 2 Abakt 0.9.2 and 0.9.3-beta1, 3 CAM UnZip 4.0 and 4.3, and possibly other products, allows user-assisted attackers to execute arbitrary code via a ZIP archive that contains a file with a long file name...

CVE-2006-2161

Buffer overflow in 1 TZipBuilder 1.79.03.01, 2 Abakt 0.9.2 and 0.9.3-beta1, 3 CAM UnZip 4.0 and 4.3, and possibly other products, allows user-assisted attackers to execute arbitrary code via a ZIP archive that contains a file with a long file name...

KLA10096 ACE vulnerability in CAM UnZip

A buffer overflow was found in CAM UnZip. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed ZIP archive. Original advisories - Related products CAM-UnZip CVE list CVE-2006-2161 high Solution Update to...

CVE-2006-0529

CVE-2006-0529 affects Computer Associates’ CA Message Queuing (CAM/CAFT) before CAM 1.07 Build 220_16 and 1.11 Build 29_20. The issue allows a remote attacker to cause a denial of service by sending a crafted message to TCP port 4105. Public references and vendor/plugin notes confirm the DoS cond...

CVE-2006-0530

CVE-2006-0530 affects CA Message Queuing (CAM/CAFT) before 1.07 Build 220_16 and 1.11 Build 29_20. The vulnerability allows remote attackers to cause a denial of service by sending spoofed CAM control messages, impacting CA products that integrate CAM. Root cause: improper handling of spoofed CAM...

CAID 33581 - CA Message Queuing Denial of Service Vulnerabilities

Title: CAID 33581 - CA Message Queuing Denial of Service Vulnerabilities CA Vulnerability ID: 33581 CA Advisory Date: 2006-02-02 Discovered By: Nicolas Pouvesle of Tenable Network Security Impact: Remote attacker can cause a denial of service condition. Summary: The following two security...

Cisco Security Response: DoS in Cisco Clean Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Response ============== This is Cisco PSIRT's response to the statements made by Alex Lanstein in his message: DoS in Cisco Clean Access, posted on 2005-Dec-16, to the Bugtraq mailing list. An archived version of the report can be found here:...

CA CAM log_security() Stack Buffer Overflow (Win32)

This module exploits a vulnerability in the CA CAM service by passing a long parameter to the logsecurity function. The CAM service is part of TNG Unicenter. This module has been tested on Unicenter v3.1. This module requires Metasploit: https://metasploit.com/download Current source:...

CA Multiple Products Message Queuing Multiple Remote Vulnerabilities

The remote version of CA Message Queuing Service contains a stack overflow in the 'logsecurity' function that may allow an attacker to execute arbitrary code on the remote host. This version is also prone to denial of service on the TCP port 4105 as well as arbitrary code execution through spoofe...

CA Unicenter 3.1 CAM log_security() Stack Overflow Exploit (meta)

No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...

CA Unicenter 3.1 - CAM log_security() Remote Stack Overflow (Metasploit)

CA Unicenter 3.1 - CAM logsecurity Remote Stack Overflow Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core...

CA Unicenter 3.1 CAM log_security() Stack Overflow Exploit (meta)

Exploit for unknown platform in category remote exploits ================================================================= CA Unicenter 3.1 CAM logsecurity Stack Overflow Exploit meta ================================================================= This file is part of the Metasploit Framework a...

CA Unicenter 3.1 - CAM 'log_security()' Remote Stack Overflow (Metasploit)

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

CVE-2005-2669

Computer Associates CA Message Queuing CAM / CAFT 1.05, 1.07 before Build 22013, and 1.11 before Build 2913 allows remote attackers to execute arbitrary commands via spoofed CAFT packets...

CVE-2005-2668

The CVE-2005-2668 entry concerns the Computer Associates Message Queuing (CAM) service within CA Unicenter. Public references describe multiple buffer-overflow flaws in CAM’s MQ component that can be triggered remotely to execute arbitrary code on Windows hosts. Documented vulnerable targets incl...

CVE-2005-2667

CA Message Queuing Service (CAM/CAFT) remote vulnerability affects versions 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13. Astack overflow in the log_security function may allow remote arbitrary code execution, with additional denial-of-service impact on TCP port 4105. Some sources ...

32919 - Computer Associates Message Queuing (CAM/CAFT) multiple vulnerabilities

Title: 32919 - Computer Associates Message Queuing CAM/CAFT multiple vulnerabilities CA Vulnerability ID: CAID 32919 Disclosure Date: 2005-08-19 Discovered By: CA internal audit Impact: Remote attackers can execute arbitrary code, or cause a denial of service condition. Summary: During a recent...