426 matches found
iDefense Security Advisory 05.09.07: Computer Associates eTrust InoTask.exe Antivirus Buffer Overflow Vulnerability
Computer Associates eTrust InoTask.exe Antivirus Buffer Overflow Vulnerability iDefense Security Advisory 05.09.07 http://labs.idefense.com/intelligence/vulnerabilities/ May 09, 2007 I. BACKGROUND Computer Associates' eTrust Antivirus is a client antivirus scanner. It is distributed in standalone...
CA (Multiple Products) - Console Server / 'InoCore.dll' Remote Code Execution
// source: https://www.securityfocus.com/bid/23906/info Multiple products by Computer Associates are prone to multiple vulnerabilities that will allow remote attackers to execute arbitrary code on an affected computer. Successful exploits will allow attacker-supplied arbitrary code to run within...
CA (Multiple Products) - Console Server InoCore.dll Remote Code Execution
CA Multiple Products - Console Server InoCore.dll Remote Code Execution // source: https://www.securityfocus.com/bid/23906/info Multiple products by Computer Associates are prone to multiple vulnerabilities that will allow remote attackers to execute arbitrary code on an affected computer...
ZDI-07-022: CA BrightStor ArcServe Media Server Multiple Buffer Overflow Vulnerabilities
ZDI-07-022: CA BrightStor ArcServe Media Server Multiple Buffer Overflow Vulnerabilities http://www.zerodayinitiative.com/advisories/ZDI-07-022.html April 24, 2007 -- CVE ID: CVE-2007-2139 -- Affected Vendor: Computer Associates -- Affected Products: BrightStor ARCserve Backup r11.5 SP2 BrightSto...
CA BrightStor ArcServe Media Server Multiple Buffer Overflow Vulnerabilities
This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Computer Associates BrightStor ARCserve Media Server. User interaction is not required to exploit this vulnerability. The specific flaw exists in the SUN RPC service which binds to a randomly chosen high...
Computer Associates BrightStor ARCserve Backup MediaSVR.EXE 191缓冲区溢出漏洞
Computer Associates BrightStor ARCserve Backup是一款企业级的备份解决方案。 Computer Associates BrightStor ARCserve Backup处理XDR过程的RPC数据存在设计错误，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 Mediasvr.exe导入的多个DLL在处理使用XDR过程的RPC数据时存在设计错误。4个来自RPC报文的字节作为特殊地址处理（xdrhandlet data会经过多次位移动和字节反转），最后装载到ECX中，在NULL字节后至少8字节NULL的191 0xbf过程成为可利用条件：...
CA BrightStor Backup 11.5.2.0 - 'Mediasvr.exe' Remote Code
!/usr/bin/python Computer Associates CA Brightstor Backup Mediasvr.exe Remote Code Exploit Previously Unknown There seems to be an design error in the handling of RPC data with xdr procedures across several .dll's imported by Mediasvr.exe. Four bytes from an RPC packet are processed as a particul...
CA BrightStor Backup 11.5.2.0 (Mediasvr.exe) Remote Code Exploit
Exploit for unknown platform in category remote exploits ================================================================ CA BrightStor Backup 11.5.2.0 Mediasvr.exe Remote Code Exploit ================================================================ !/usr/bin/python Computer Associates CA...
CA BrightStor ARCserver Tape Engine memory corruption vulnerability
Overview The Computer Associates BrightStor ARCserve Backup Tape Engine contains a memory corruption vulnerability. If successfully exploited, this vulnerability may allow an attacker to execute arbitrary code or create a denial-of-service condition. Description BrightStor ARCserve Backup is a...
CA eTrust Admin GINA模块权限提升漏洞
CA eTrust Admin可为企业提供整体的安全管理策略。 CA eTrust Admin GINA组件的口令重置接口中存在权限提升漏洞，允许能够物理交互访问或通过远程桌面访问的攻击者获得管理员权限。 Computer Associates eTrust Admin 8.1 SP2 8.1.2 Computer Associates eTrust Admin 8.1 SP1 8.1.1 Computer Associates eTrust Admin 8.1 8.1.0 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Authentication flaw
Unspecified vulnerability in cube.exe in the GINA component for CA Computer Associates eTrust Admin 8.1.0 through 8.1.2 allows attackers with physical interactive or Remote Desktop access to bypass authentication and gain privileges via the password reset interface...
Computer Associates eTrust IDS DoS
DoS through administrations interface TCP/9191...
iDefense Security Advisory 02.27.07: Computer Associates eTrust Intrusion Detection Denial of Service Vulnerability
Computer Associates eTrust Intrusion Detection Denial of Service Vulnerability iDefense Security Advisory 02.27.07 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 27, 2007 I. BACKGROUND Computer Associates eTrust Intrusion Detection is a network intrusion management and prevention...
CA BrightStor ARCserve Message Engine Buffer Overflow
This module exploits a buffer overflow in Computer Associates BrightStor ARCserve Backup 11.1 - 11.5 SP2. By sending a specially crafted RPC request, an attacker could overflow the buffer and execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source:...
CA BrightStor ARCserve Message Engine Heap Overflow
This module exploits a heap overflow in Computer Associates BrightStor ARCserve Backup 11.5. By sending a specially crafted RPC request, an attacker could overflow the buffer and execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source:...
Computer Associates BrightStor ARCserve Backup Catirpc.EXE远程拒绝服务漏洞
Computer Associates BrightStor ARCserve Backup是一款企业级别的备份解决方案。 BrightStor AECserver Backup包含的Catirpc.exe处理TADDR2UADDR过程存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 Catirpc.exe是为BrightStor Backup产品提供末端映射和启用RPC服务的程序。CATIRPC.dll不正确处理用于与CA RPC服务器通信的TADDR2UADDR过程，可导致一个NULL指针引用而造成拒绝服务攻击。 Computer Associates BrightSto...
Computer Associates BrightStor ARCserve Backup LGServer.EXE远程堆缓冲区溢出漏洞
Computer Associates BrightStor ARCserve Backup是一款企业级别的备份解决方案。 BrightStor ARCserve Backup包含的LGSERVER.EXE处理畸形报文存在问题，远程攻击者可以利用漏洞进行堆溢出攻击，可能以进程权限执行任意指令。 所有针对Mobile Backup服务进程LGSERVER.EXE监听在TCP 2200口的报文以"\x4e\x3d\x2c\x1b"序列开头，发送包含\x4e\x3d\x2c\x1b并追加65535字符的字符串可导致进程终止，可能导致任意代码执行。 Computer Associates...
CA BrightStor ARCserve 11.5.2.0 (catirpc.dll) RPC Server DoS Exploit
No description provided by source. !/usr/bin/ruby Computer Associates CA Brightstor Backup Remote Procedure Call Server DoS catirpc.dll Catirpc.exe - Provides the endpoint mapper and enables RPC services for BrightStor Backup products. 7c.350: Access violation - code c0000005 !!! second chance !!...
CA BrightStor ARCServe BackUp LGServer拒绝服务漏洞
BrightStor ARCserve Backup可为各种平台的服务器提供备份和恢复保护功能。 BrightStor ARCserve Backup处理带有畸形参数的请求报文时存在漏洞，远程攻击者可能利用此漏洞导致进程崩溃。 在认证协商期间客户端报文中的16进制地址（DWORD）0x11到0x14上的第三个客户端报文指定了数据长度。如果能够将这个值设置为0xff 0xff 0xff 0xff的话就会导致出现访问破坏，终止进程。 Computer Associates BrightStor ARCserve Backup for Laptops & Desktops r11.1 厂商补丁...
CA BrightStor ARCserve 11.5.2.0 - catirpc.dll RPC Server Denial of Service
CA BrightStor ARCserve 11.5.2.0 - catirpc.dll RPC Server Denial of Service !/usr/bin/ruby Computer Associates CA Brightstor Backup Remote Procedure Call Server DoS catirpc.dll Catirpc.exe - Provides the endpoint mapper and enables RPC services for BrightStor Backup products. 7c.350: Access...