Computer Associates applications multiple security vulnerabilities

Multiple vulnerabilities, inluding remote buffer overflow...

CA ARCserve Backup Message Engine Denial of Service (CVE-2009-1761)

Computer Associates CA provides a group of security and management products for enterprise as well as individual clients. A denial of service vulnerability exists in CA ARCserve Backup Message Engine. The vulnerability exists in CA ARCserve Message Engine. The vulnerability is due to insufficient...

Computer Associates SiteMinder - %00 Cross-Site Scripting Protection Security Bypass

Computer Associates SiteMinder - %00 Cross-Site Scripting Protection Security Bypass source: https://www.securityfocus.com/bid/36086/info Computer Associates SiteMinder is prone to a security-bypass vulnerability because it fails to properly validate user-supplied input. An attacker can exploit...

Computer Associates SiteMinder - Unicode Cross-Site Scripting Protection Security Bypass

Computer Associates SiteMinder - Unicode Cross-Site Scripting Protection Security Bypass source: https://www.securityfocus.com/bid/36088/info Computer Associates SiteMinder is prone to a security-bypass vulnerability because it fails to properly validate user-supplied input. An attacker can explo...

Computer Associates SiteMinder - Unicode Cross-Site Scripting Protection Security Bypass

source: https://www.securityfocus.com/bid/36088/info Computer Associates SiteMinder is prone to a security-bypass vulnerability because it fails to properly validate user-supplied input. An attacker can exploit this issue to bypass cross-site scripting protections. Successful exploits can aid in...

Computer Associates SiteMinder - '%00' Cross-Site Scripting Protection Security Bypass

source: https://www.securityfocus.com/bid/36086/info Computer Associates SiteMinder is prone to a security-bypass vulnerability because it fails to properly validate user-supplied input. An attacker can exploit this issue to bypass cross-site scripting protections. Successful exploits can aid in...

NSD vulnerable to one-byte overflow

Overview A vulnerability exists in the way NSD processes certain types of packets that may lead to a one-byte buffer overflow. Description Name server daemon NSD is an open source name server developed by NLnet Labs. NSD contains an off-by-one error that can cause a one-byte buffer overflow when...

CA Antivirus Engine Multiple Scan Evasion

The Computer Associates CA antivirus scan engine installed on the remote host is affected by multiple scan evasion vulnerabilities due to a failure to handle certain malformed archive files. An attacker can exploit this, via crafted archive files, to evade detection by the scan engine. C Tenable...

Computer Associates License Service invalid command buffer overflow

Added: 12/24/2008 CVE: CVE-2005-0581 BID: 12705 OSVDB: 14389 Background The License service comes with most Computer Associatesproducts and exchanges license information over ports 10202/tcp and 10203/tcp. Problem A buffer overflow vulnerability allows a remote attacker to execute arbitrary...

Computer Associates License Service invalid command buffer overflow

Added: 12/24/2008 CVE: CVE-2005-0581 BID: 12705 OSVDB: 14389 Background The License service comes with most Computer Associatesproducts and exchanges license information over ports 10202/tcp and 10203/tcp. Problem A buffer overflow vulnerability allows a remote attacker to execute arbitrary...

Computer Associates License Service invalid command buffer overflow

Added: 12/24/2008 CVE: CVE-2005-0581 BID: 12705 OSVDB: 14389 Background The License service comes with most Computer Associatesproducts and exchanges license information over ports 10202/tcp and 10203/tcp. Problem A buffer overflow vulnerability allows a remote attacker to execute arbitrary...

Update Protection against CA Multiple Products ActiveX Control Buffer Overflow Vulnerability

A vulnerability was reported in multiple Computer Associates CA products. These products are all intended for enhancing corporate and client security. The vulnerability is due to insufficient boundary checking in the parameters passed to the affected ActiveX control installed by the products list...

Immunity Canvas: BRIGHTSTOR_CMDEXEC

Name| brightstorcmdexec ---|--- CVE| CVE-2008-4397 Exploit Pack| CANVAS Description| brightstorcmdexec Notes| CVE Name: CVE-2008-4397 VENDOR: Computer Associates Notes: This exploit will start a TFTP server which is why it requires root and have the remote side download and execute a MOSDEF...

Computer Associates ARCserve REPORTREMOTEEXECUTECML Buffer Overflow

This module exploits a buffer overflow in Computer Associates BrightStor ARCserve r11.5 build 3884. By sending a specially crafted RPC request to opcode 0x342, an attacker could overflow the buffer and execute arbitrary code. In order to successfully exploit this vulnerability, you will need set...

Computer Associates Service Desk Web表单跨站脚本漏洞

BUGTRAQ ID: 31412 CVE ID：CVE-2008-4119 CNCVE ID：CNCVE-20084119 Computer Associates Service Desk是一款帮助台解决方案。 Computer Associates Service Desk处理WEB表单的数据时缺少充分过滤，远程攻击者可以利用漏洞进行跨站脚本攻击，可获得目标用户敏感信息。 攻击者可以构建恶意WEB页，诱使用户点击进行攻击。 Computer Associates Service Desk r11.2 Computer Associates CMDB 11.2 Computer...

Computer Associates 'kmxfw.sys'本地代码执行和远程拒绝服务漏洞

BUGTRAQ ID: 30651 CVE ID：CVE-2008-3174 CVE-2008-2926 CNCVE ID：CNCVE-20083174 CNCVE-20082926 CA HIPS包含漏洞允许本地攻击者导致系统崩溃或任意代码执行。漏洞是由于kmxfw.sys驱动不充分验证IOCTL请求引起的，攻击者发送IOCTL请求可导致系统崩溃或执行任意代码。 另外kmxfw.sys驱动不充分的验证可导致应用程序崩溃，造成拒绝服务攻击。 目前没有详细漏洞细节提供。 Computer Associates Personal Firewall 2008 Computer Associat...

CA ARCserve Backup for Laptops and Desktops整数溢出漏洞

BUGTRAQ ID: 30472 CVECAN ID: CVE-2008-3175 CA的ARCserve Backup可为各种平台的服务器提供备份和恢复保护功能。 CA ARCserve Backup for Laptops and Desktops的LGServer服务在处理入站消息时存在整数溢出漏洞，如果未经认证的远程攻击者向TCP 1900端口上的LGServer服务提交了恶意请求的话，就会触发这个溢出，导致拒绝服务或执行任意指令。 Computer Associates Protection Suites 3.1 Computer Associates Protection...

Multiple AntiVirus (zip file) Detection Bypass Exploit

No description provided by source. / zipbrk.c - Proof-of-Concept for CAN-2004-0932 - CAN-2004-0937 Copyright C 2004 oc.192 This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either...

CA eTrust Secure Content Manager多个栈溢出漏洞

BUGTRAQ ID: 29528 CVECAN ID: CVE-2008-2541 eTrust Secure Content Manager（eTrust SCM）是独立、统一的网关解决方案，能够帮助企业从中央管理控制台防范资料窃密以及网络和信息传递威胁。 eTrust SCM运行在8080端口上的HTTP网关服务（icihttp.exe）中存在多个栈溢出漏洞。如果用户发布了FTP服务请求，进程会试图修饰事件处理的内容，在这种情况下如果指定了超长的LIST或PASV命令响应，就会触发栈溢出，导致以SYSTEM权限执行任意指令。 Computer Associates eTrust...

ZDI-08-035: CA ETrust Secure Content Manager Gateway FTP PASV Stack Overflow Vulnerability

ZDI-08-035: CA ETrust Secure Content Manager Gateway FTP PASV Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-035 June 4, 2008 -- CVE ID: CVE-2008-2541 -- Affected Vendors: Computer Associates -- Affected Products: Computer Associates eTrust Secure Content Manager ...