Computer Associates Alert Notification Server buffer overflow

Added: 07/19/2007 CVE: CVE-2007-3825 BID: 24947 OSVDB: 36096 Background The Alert Notification Server is included with multiple Computer Associates products to provide notifications to console users. Problem The Alert Notification Server is affected by buffer overflow vulnerabilities in multiple...

CA产品警告通知服务器远程栈溢出漏洞

CVECAN ID: CVE-2007-3825 警告通知服务器（alert.exe）是很多CA产品都在使用的服务，用于为控制台用户提供通知。 警告通知服务器所注册的RPC接口（GUID 3d742890-397c-11cf-9bf1-00805f88cb72）存在栈溢出漏洞。如果远程攻击者向该服务接口提交了超长的RPC请求的话，就可能触发这个溢出，导致以系统权限执行任意指令。 可使用SMB协议到达有漏洞的代码，因此在Windows XP及之后系统上必须有效的认证凭据，而Windows 2000无须认证。 Computer Associates BrightStor ARCserve...

CA BrightStor ARCserve Backup Server未明远程代码执行漏洞

Computer Associates BrightStor ARCserve Backup是一款企业级别的备份解决方案。 Computer Associates BrightStor ARCserve Backup存在未明安全问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 目前没有详细漏洞细节提供。 Computer Associates BrightStor ARCServe Backup 11.5.SP3 目前没有解决方案提供： http://www3.ca.com/Solutions/ProductFamily.asp?ID=115...

CVE-2007-3337

CVE-2007-3337 concerns the Ingres database server (2006 9.0.4 and earlier) used in multiple CA products. A local user can abuse the setuid root binary “wakeup” by creating a symbolic link to the file alarmwkp.def, causing the binary to truncate arbitrary files in the current directory. The issue ...

CA杀毒引擎畸形CAB文件名远程栈溢出漏洞

Computer Associates是世界领先的安全厂商，产品包括多种杀毒软件及备份恢复系统。 多个CA产品的杀毒引擎在解析畸形内容的.CAB文档时存在栈溢出漏洞，远程攻击者可能利用此漏洞控制系统， 软件包中vete.dll模块如果处理了.CAB文档中的超长文件名，就会触发这个溢出，导致执行任意指令。 Computer Associates BrightStor ARCserve Backup R11.5 Computer Associates BrightStor ARCserve Backup R11.1 Computer Associates BrightStor ARCserv...

ZDI-07-035: CA Multiple Product AV Engine CAB Header Parsing Stack Overflow Vulnerability

ZDI-07-035: CA Multiple Product AV Engine CAB Header Parsing Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-035.html June 5, 2007 -- CVE ID: CVE-2007-2864 -- Affected Vendor: Computer Associates -- Affected Products: CA Anti-Virus eTrust EZ Antivirus CA Internet...

[Full-disclosure] ZDI-07-034: CA Multiple Product AV Engine CAB Filename Parsing Stack Overflow Vulnerability

ZDI-07-034: CA Multiple Product AV Engine CAB Filename Parsing Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-034.html June 5, 2007 -- CVE ID: CVE-2007-2863 -- Affected Vendor: Computer Associates -- Affected Products: CA Anti-Virus eTrust EZ Antivirus CA Internet...

Computer Associates Anti-Virus engine fails to properly handle malformed CAB archives

Overview The Computer Associates Anti-Virus engine contains a stack-based buffer overflow that may allow a remote, unauthenticated attacker to execute arbitrary code. Description The Computer Associates Anti-Virus engine contains a stack-based buffer overflow in the code responsible for processin...

CA Multiple Product AV Engine CAB Filename Parsing Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of various Computer Associates products. The specific flaw exists in the parsing of .CAB archives. When a long filename contained in the .CAB is processed by vete.dll an exploitable stack overflow may...

CA Multiple Product AV Engine CAB Header Parsing Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code onvulnerable installations of various Computer Associates products. The specific flaw exists within the processing of an improperly defined "coffFiles" field in .CAB archives. Large values result in an unbounded data copy...

CA BrightStor Backup 11.5.2.0 Mediasvr.exe Denial of Service Exploit

No description provided by source. !/usr/bin/python Computer Associates CA Brightstor Backup Mediasvr.exe DoS catirpc.dll/rwxdr.dll Previously Unknown There is an issue with RPC operation 126 and the imported cactirpc.dll and rwxdr.dll. It looks as if Mediasvr.exe identifies a Bad Job Handle ...

CA BrightStor Backup 11.5.2.0 caloggderd.exe Denial of Service Exploit

No description provided by source. !/usr/bin/python Computer Associates CA Brightstor Backup caloggderd.exe DoS camt70.dll Previously Unknown There is an issue in camt70.dll when caloggerd is processing a hostname for a login operation...

Computer Associates BrightStor ARCserve Backup 11.5 - mediasvr caloggerd Denial of Service

Computer Associates BrightStor ARCserve Backup 11.5 - mediasvr caloggerd Denial of Service source: https://www.securityfocus.com/bid/24017/info Computer Associates BrightStor ARCserve Backup is prone to multiple denial-of-service vulnerabilities due to memory-corruption issues caused by errors in...

cabright-dos.txt

!/usr/bin/python Computer Associates CA Brightstor Backup caloggderd.exe DoS camt70.dll Previously Unknown There is an issue in camt70.dll when caloggerd is processing a hostname for a login operation. When processing the string, if a null is passed in as an argument, it will be loaded into ESI a...

cabright2-dos.txt

!/usr/bin/python Computer Associates CA Brightstor Backup Mediasvr.exe DoS catirpc.dll/rwxdr.dll Previously Unknown There is an issue with RPC operation 126 and the imported cactirpc.dll and rwxdr.dll. It looks as if Mediasvr.exe identifies a Bad Job Handle as seen in its log file. Log Message:...

CA BrightStor Backup 11.5.2.0 - caloggderd.exe Denial of Service

CA BrightStor Backup 11.5.2.0 - caloggderd.exe Denial of Service !/usr/bin/python Computer Associates CA Brightstor Backup caloggderd.exe DoS camt70.dll Previously Unknown There is an issue in camt70.dll when caloggerd is processing a hostname for a login operation. When processing the string, if...

Computer Associates BrightStor ARCserve Backup 11.5 - mediasvr caloggerd Denial of Service

source: https://www.securityfocus.com/bid/24017/info Computer Associates BrightStor ARCserve Backup is prone to multiple denial-of-service vulnerabilities due to memory-corruption issues caused by errors in processing arguments passed to RPC procedures. A remote attacker may exploit these issues ...

iDefense Security Advisory 05.09.07: Computer Associates eTrust InoTask.exe Antivirus Buffer Overflow Vulnerability

Computer Associates eTrust InoTask.exe Antivirus Buffer Overflow Vulnerability iDefense Security Advisory 05.09.07 http://labs.idefense.com/intelligence/vulnerabilities/ May 09, 2007 I. BACKGROUND Computer Associates' eTrust Antivirus is a client antivirus scanner. It is distributed in standalone...

ZDI-07-028: CA eTrust AntiVirus Server inoweb Buffer Overflow Vulnerability

ZDI-07-028: CA eTrust AntiVirus Server inoweb Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-028.html May 9, 2007 -- CVE ID: CVE-2007-2522 -- Affected Vendor: Computer Associates -- Affected Products: eTrust AntiVirus Server v8 -- TippingPointTM IPS Customer...

Computer Associates AntiVirus InoTask buffer overflow vulnerability

Overview Computer Associates AntiVirus for the Enterprise and Threat Manager products contain a buffer overflow vulnerability that may be exploited by local users to execute code with elevated privileges. Description Computer Associates eTrust Antivirus v8 includes a component called InoTask...