Multiple AntiVirus (zip file) Detection Bypass Exploit

No description provided by source. / zipbrk.c - Proof-of-Concept for CAN-2004-0932 - CAN-2004-0937 Copyright C 2004 oc.192 This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either...

CA BrightStor HSM Buffer Overflow

This module exploits one of the multiple stack buffer overflows in Computer Associates BrightStor HSM. By sending a specially crafted request, an attacker could overflow the buffer and execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source:...

CA eTrust Secure Content Manager多个栈溢出漏洞

BUGTRAQ ID: 29528 CVECAN ID: CVE-2008-2541 eTrust Secure Content Manager（eTrust SCM）是独立、统一的网关解决方案，能够帮助企业从中央管理控制台防范资料窃密以及网络和信息传递威胁。 eTrust SCM运行在8080端口上的HTTP网关服务（icihttp.exe）中存在多个栈溢出漏洞。如果用户发布了FTP服务请求，进程会试图修饰事件处理的内容，在这种情况下如果指定了超长的LIST或PASV命令响应，就会触发栈溢出，导致以SYSTEM权限执行任意指令。 Computer Associates eTrust...

TPTI-08-05: CA ETrust Secure Content Manager Gateway FTP LIST Stack Overflow Vulnerability

TPTI-08-05: CA ETrust Secure Content Manager Gateway FTP LIST Stack Overflow Vulnerability http://dvlabs.tippingpoint.com/advisory/TPTI-08-05 June 4, 2008 -- CVE ID: CVE-2008-2541 -- Affected Vendors: Computer Associates -- Affected Products: Computer Associates eTrust Secure Content Manager --...

ZDI-08-036: CA ETrust Secure Content Manager Gateway FTP LIST Stack Overflow

ZDI-08-036: CA ETrust Secure Content Manager Gateway FTP LIST Stack Overflow http://www.zerodayinitiative.com/advisories/ZDI-08-036 June 4, 2008 -- CVE ID: CVE-2008-2541 -- Affected Vendors: Computer Associates -- Affected Products: Computer Associates eTrust Secure Content Manager -- Vulnerabili...

TPTI-08-05: CA ETrust Secure Content Manager Gateway FTP LIST Stack Overflow Vulnerability

TPTI-08-05: CA ETrust Secure Content Manager Gateway FTP LIST Stack Overflow Vulnerability http://dvlabs.tippingpoint.com/advisory/TPTI-08-05 June 4, 2008 -- CVE ID: CVE-2008-2541 -- Affected Vendors: Computer Associates -- Affected Products: Computer Associates eTrust Secure Content Manager --...

ZDI-08-035: CA ETrust Secure Content Manager Gateway FTP PASV Stack Overflow Vulnerability

ZDI-08-035: CA ETrust Secure Content Manager Gateway FTP PASV Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-035 June 4, 2008 -- CVE ID: CVE-2008-2541 -- Affected Vendors: Computer Associates -- Affected Products: Computer Associates eTrust Secure Content Manager ...

CA Internet Security Suite - UmxEventCli.dll ActiveX Control Arbitrary File Overwrite

CA Internet Security Suite - UmxEventCli.dll ActiveX Control Arbitrary File Overwrite source: https://www.securityfocus.com/bid/29406/info A Computer Associates Internet Security Suite ActiveX control is prone to a vulnerability that lets attackers overwrite files with arbitrary,...

CA Internet Security Suite - 'UmxEventCli.dll' ActiveX Control Arbitrary File Overwrite

source: https://www.securityfocus.com/bid/29406/info A Computer Associates Internet Security Suite ActiveX control is prone to a vulnerability that lets attackers overwrite files with arbitrary, attacker-controlled content. The issue occurs because the control fails to sanitize user-supplied inpu...

CA ARCserve Backup caloggerd和xdr函数目录遍历及栈溢出漏洞

BUGTRAQ ID: 29283 CVECAN ID: CVE-2008-2241,CVE-2008-2242 BrightStor ARCserve Backup可为各种平台的服务器提供备份和恢复保护功能。 ARCserve Backup的caloggerd日志守护程序在处理日志消息时对提供的路径缺少检查，如果攻击者向文件附加了恶意数据的话，就可能导致在生成日志时导致目录遍历攻击。 如果向ARCserve Backup的xdrrwsstring库函数传送了超长参数的话，就可能触发栈溢出，导致执行任意指令。 Computer Associates Server Protection r...

ZDI-08-027: CA BrightStor ARCserve Backup Arbitrary File Writing Vulnerability

ZDI-08-027: CA BrightStor ARCserve Backup Arbitrary File Writing Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-027 -- CVE ID: CVE-2008-2241 -- Affected Vendors: Computer Associates -- Affected Products: Computer Associates BrightStor ARCserve Server -- TippingPointTM IPS Custom...

CA BrightStor ARCserve for Laptops and Desktops LGServer Buffer Overflow

This module exploits a stack buffer overflow in Computer Associates BrightStor ARCserve Backup for Laptops & Desktops 11.1. By sending a specially crafted request, an attacker could overflow the buffer and execute arbitrary code. This module requires Metasploit: https://metasploit.com/download...

Computer Associates Alert Notification Server opcode 23 buffer overflow

Added: 04/25/2008 CVE: CVE-2007-4620 BID: 28605 OSVDB: 44040 Background The Alert Notification Server is included with multiple Computer Associates products to provide notifications to console users. Problem The Alert Notification Server is affected by buffer overflow vulnerabilities in multiple...

Computer Associates Alert Notification Server opcode 23 buffer overflow

Added: 04/25/2008 CVE: CVE-2007-4620 BID: 28605 OSVDB: 44040 Background The Alert Notification Server is included with multiple Computer Associates products to provide notifications to console users. Problem The Alert Notification Server is affected by buffer overflow vulnerabilities in multiple...

Computer Associates Alert Notification Server opcode 23 buffer overflow

Added: 04/25/2008 CVE: CVE-2007-4620 BID: 28605 OSVDB: 44040 Background The Alert Notification Server is included with multiple Computer Associates products to provide notifications to console users. Problem The Alert Notification Server is affected by buffer overflow vulnerabilities in multiple...

Computer Associates Alert Notification Server opcode 23 buffer overflow

Added: 04/25/2008 CVE: CVE-2007-4620 BID: 28605 OSVDB: 44040 Background The Alert Notification Server is included with multiple Computer Associates products to provide notifications to console users. Problem The Alert Notification Server is affected by buffer overflow vulnerabilities in multiple...

Computer Associates ARCserve Backup Discovery Service Remote - Denial of Service

Computer Associates ARCserve Backup Discovery Service Remote - Denial of Service source: https://www.securityfocus.com/bid/28927/info Computer Associates ARCserve Backup is affected by a denial-of-service vulnerability because the application mishandles malformed user-supplied input. A remote...

Computer Associates ARCserve Backup Discovery Service Remote - Denial of Service

source: https://www.securityfocus.com/bid/28927/info Computer Associates ARCserve Backup is affected by a denial-of-service vulnerability because the application mishandles malformed user-supplied input. A remote attacker may exploit this issue to cause denial-of-service conditions. CA ARCserve...

Computer Associates eTrust Secure Content Manager 8.0 - eCSqdmn Remote Denial of Service

Computer Associates eTrust Secure Content Manager 8.0 - eCSqdmn Remote Denial of Service source: https://www.securityfocus.com/bid/28888/info Computer Associates eTrust Secure Content Manager is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to crash the...

Computer Associates eTrust Secure Content Manager 8.0 - 'eCSqdmn' Remote Denial of Service

source: https://www.securityfocus.com/bid/28888/info Computer Associates eTrust Secure Content Manager is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to crash the affected application, denying service to legitimate users...