CA BrightStor ARCserve Backup Message Engine RPC buffer overflow

Overview The Computer Associates BrightStor ARCserve Backup Message Engine contains a buffer overflow vulnerability. If successfully exploited, this vulnerability may allow a remote attacker to execute arbitrary code. Description BrightStor ARCserve Backup is a backup and data retention tool that...

Cross site request forgery (csrf)

The Tape Engine service in Computer Associates CA BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/Business Protection Suite r2 allows remote attackers to execute arbitrary code via certain data in opnum 0xBF in an RPC request, which is directly executed...

CVE-2007-0169

Multiple buffer overflows in Computer Associates CA BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/Business Protection Suite r2 allow remote attackers to execute arbitrary code via RPC requests with crafted data for opnums 1 0x2F and 2 0x75 in the a Message...

Buffer overflow

Multiple buffer overflows in Computer Associates CA BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/Business Protection Suite r2 allow remote attackers to execute arbitrary code via RPC requests with crafted data for opnums 1 0x2F and 2 0x75 in the a Message...

CVE-2007-0168

The Tape Engine service in Computer Associates CA BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/Business Protection Suite r2 allows remote attackers to execute arbitrary code via certain data in opnum 0xBF in an RPC request, which is directly executed...

CVE-2007-0169

CA BrightStor ARCserve Backup (including Tape Engine and Message Engine RPC services) contains buffer overflow vulnerabilities triggered by crafted RPC requests. The flaws arise from insufficient validation of user-supplied data in RPC messages, permitting remote, unauthenticated attackers to pot...

CVE-2007-0169

Multiple buffer overflows in Computer Associates CA BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/Business Protection Suite r2 allow remote attackers to execute arbitrary code via RPC requests with crafted data for opnums 1 0x2F and 2 0x75 in the a Message...

CVE-2006-6917

Multiple buffer overflows in Computer Associates CA BrightStor ARCserve Backup R11.5 Server before SP2 allows remote attackers to execute arbitrary code in the Tape Engine tapeeng.exe via a crafted RPC request with 1 opnum 38, which is not properly handled in TAPEUTIL.dll 11.5.3884.0, or 2 opnum...

CA BrightStor ARCserve Backup - Message EngineTape Engine Remote Buffer Overflow

CA BrightStor ARCserve Backup - Message EngineTape Engine Remote Buffer Overflow source: https://www.securityfocus.com/bid/22005/info Computer Associates BrightStor ARCserve Backup is affected by a remote buffer-overflow vulnerability because the application fails to perform proper bounds-checkin...

CA BrightStor ARCserve Backup Tape Engine Code Execution Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Computer Associates BrightStor ARCserve Backup. User interaction is not required to exploit this vulnerability. The specific flaw exists in the handling of RPC requests to the Tape Engine service which...

CA eTrust Security Command Center and eTrust Audit 存在多个漏洞

CA eTrust Security Command Center eSCC和eTrust Audit是CA产品安全命令执行和审核程序。 CA eTrust Security Command Center eSCC和eTrust Audit存在多个安全问题，远程攻击者可以利用漏洞获得敏感信息，执行任意文件删除或者重播攻击。 第一个问题是允许攻击者发现在windows平台上的web服务器路径信息，此漏洞影响eTrust Security Command Center Server 1.0, r8, r8 SP1 CR1, 和r8 SP1 CR2版本。...

CA Anti-Virus多个驱动本地拒绝服务漏洞

CA Anti-Virus是一款杀毒软件。 CA Anti-Virus的vetfddnt.sys和vetmonnt.sys驱动没有正确地处理空缓冲区，允许本地攻击者通过一些IOCTL（METHODBUFFERED）操作导致蓝屏死机。 Computer Associates Anti-Virus for Vista Beta v8.2 Computer Associates Anti-Virus 2007 v8.1 Computer Associates Internet Security Suite 2007 v3.0 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CA多个BrightStor ARCserve Backup发现服务远程缓冲区溢出漏洞

BrightStor ARCserve Backup是为各种平台的服务器提供备份和恢复保护功能的解决方案。 BrightStor ARCserve Backup发现服务存在缓冲区溢出攻击，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 多个BrightStor ARCserve Backup应用程序存在此问题，在Windows平台下可以SYSTEM权限执行任意指令。目前没有详细漏洞细节提供。 Computer Associates Server Protection Suite r2 Computer Associates Business Protection Suite fo...

LS-20060908 - Computer Associates BrightStor ARCserve Backup v11.5 Remote Buffer Overflow Vulnerability

LS-20060908 LSsec has discovered a vulnerability in Computer Associates BrightStor ARCserve Backup v11.5, which could be exploited by an anonymous attacker in order to execute arbitrary code with SYSTEM privileges on an affected system. The flaw specifically exists within the Tape Engine...

LS-20061001 - Computer Associates BrightStor ARCserve Backup v11.5 Remote Buffer Overflow Vulnerability

LS-20061001 LSsec has discovered a vulnerability in Computer Associates BrightStor ARCserve Backup v11.5, which could be exploited by an anonymous attacker in order to execute arbitrary code with SYSTEM privileges on an affected system. The flaw specifically exists within the Tape Engine...

BrightStor ARCserve Discovery service 9b command buffer overflow

Added: 12/08/2006 CVE: CVE-2006-6379 BID: 21502 OSVDB: 30775 Background The BrightStor ARCserve Backup server includes a discovery service which listens on ports 41523/TCP and 41524/UDP. Problem A buffer overflow vulnerability in the ASBRDCST.DLL library allows remote attackers to execute arbitra...

BrightStor ARCserve Discovery service 9b command buffer overflow

Added: 12/08/2006 CVE: CVE-2006-6379 BID: 21502 OSVDB: 30775 Background The BrightStor ARCserve Backup server includes a discovery service which listens on ports 41523/TCP and 41524/UDP. Problem A buffer overflow vulnerability in the ASBRDCST.DLL library allows remote attackers to execute arbitra...

BrightStor ARCserve Discovery service 9b command buffer overflow

Added: 12/08/2006 CVE: CVE-2006-6379 BID: 21502 OSVDB: 30775 Background The BrightStor ARCserve Backup server includes a discovery service which listens on ports 41523/TCP and 41524/UDP. Problem A buffer overflow vulnerability in the ASBRDCST.DLL library allows remote attackers to execute arbitra...

Computer Associates BrightStor ARCserve Backup磁带引擎缓冲区溢出漏洞

Computer Associates BrightStor ARCserve Backup是一款企业级的备份服务器程序。 Computer Associates BrightStor ARCserve Backup的磁带引擎存在缓冲区溢出问题，远程攻击者可以利用漏洞以进程权限执行任意指令。 问题是由于磁带引擎服务程序tapeeng.exe不正确处理TCP 6502端口的RPC请求，目前没有详细漏洞细节提供。 Computer Associates BrightStor ARCServe Backup 11.5...

CA BrightStor ARCserve Backup Tape Engine服务远程缓冲区溢出漏洞

BrightStor ARCserve Backup可为各种平台的服务器提供备份和恢复保护功能。 BrightStor ARCserver Backup的Tape Engine服务（tapeeng.exe）没有正确处理RPC请求，远程攻击者可以通过向该服务（默认端口6502/TCP）发送特制报文触发缓冲区溢出，导致执行任意代码。 Computer Associates BrightStor ARCserve Backup 11.5 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.cai.com/...