CVE-2005-0968

CA eTrust Intrusion Detection 3.0 is affected. The issue arises in the Crypto API function CPImportKey, where large size values are not properly validated, enabling remote attackers to trigger a denial of service by sending crafted input and crashing the remote IDS service. The vulnerability is e...

CVE-2002-1598

This CVE pertains to CA‑MLink (CA-MLink) 6.5 and earlier, where a buffer overflow can be triggered by long command line arguments to mlclear or mllock, allowing local code execution. The vulnerability is described as a local-privilege context with a potential for arbitrary code execution, but the...

CVE-2005-0641

Cross-site scripting XSS vulnerability in the Reporter for Computer Associates CA Unicenter Asset Management UAM 4.0 allows remote attackers to inject arbitrary HTML or web script via the 1 name or 2 description in a report template...

iDEFENSE Security Advisory 03.02.05: Computer Associates License Client PUTOLF Buffer Overflow

Computer Associates License Client PUTOLF Buffer Overflow iDEFENSE Security Advisory 03.02.05 www.idefense.com/application/poi/display?id=211&type=vulnerabilities March 2, 2005 I. BACKGROUND The Computer Associates License Client/Server applications provide a method for CA products to register...

EEYE: Computer Associates License Manager Remote Vulnerabilities

Computer Associates License Manager Remote Vulnerabilities Release Date: 03/02/2005 Severity: High Remote Code Execution Vendor: Computer Associates Software Affected: The vulnerability exists if the CA License package version on the system is between v1.53 and v1.61.8. This package is included i...

iDEFENSE Security Advisory 03.02.05: Computer Associates License Client/Server GCR Network Buffer Overflow

Computer Associates License Client/Server GCR Network Buffer Overflow iDEFENSE Security Advisory 03.02.05 www.idefense.com/application/poi/display?id=214&type=vulnerabilities March 2, 2005 I. BACKGROUND The Computer Associates License Client/Server applications provide a method for CA products to...

iDEFENSE Security Advisory 03.02.05: Computer Associates License Client and Server Invalid Command Buffer Overflow

Computer Associates License Client and Server Invalid Command Buffer Overflow iDEFENSE Security Advisory 03.02.05 www.idefense.com/application/poi/display?id=210&type=vulnerabilities March 2, 2005 I. BACKGROUND The Computer Associates License Client/Server applications provide a method for CA...

iDEFENSE Security Advisory 03.02.05: Computer Associates License Client/Server GETCONFIG Buffer Overflow

Computer Associates License Client/Server GETCONFIG Buffer Overflow iDEFENSE Security Advisory 03.02.05 www.idefense.com/application/poi/display?id=213&type=vulnerabilities March 2, 2005 I. BACKGROUND The Computer Associates License Client/Server applications provide a method for CA products to...

Computer Associates Licensing client and server multiple vulnerabilities

Multiple buffer overflows on different network protocol commands processing...

iDEFENSE Security Advisory 03.02.05: Computer Associates License Client/Server GCR Checksum Buffer Overflow

Computer Associates License Client/Server GCR Checksum Buffer Overflow iDEFENSE Security Advisory 03.02.05 www.idefense.com/application/poi/display?id=215&type=vulnerabilities March 2, 2005 I. BACKGROUND The Computer Associates License Client/Server applications provide a method for CA products t...

iDEFENSE Security Advisory 03.02.05: Computer Associates License Client PUTOLF Directory Traversal

Computer Associates License Client PUTOLF Directory Traversal iDEFENSE Security Advisory 03.02.05 www.idefense.com/application/poi/display?id=212&type=vulnerabilities March 2, 2005 I. BACKGROUND The Computer Associates License Client/Server applications provide a method for CA products to registe...

CVE-2005-0583

CVE-2005-0583 concerns the CA License Client 0.1.0.15, where a directory traversal via PUTOLF requests can create arbitrary files across the host. Public sources (NVD/NVD-derived entries and iDEFENSE advisory) confirm the vulnerability exists in CA License Client/Server components and note that a...

CVE-2005-0583

Directory traversal vulnerability in Computer Associates CA License Client 0.1.0.15 allows remote attackers to create arbitrary files via .. dot dot sequences in a PUTOLF request...

CVE-2005-0582

Buffer overflow in Computer Associates CA License Client 0.1.0.15 allows remote attackers to execute arbitrary code via a long filename in a PUTOLF request...

CVE-2005-0581

Summary of vulnerability facts (CVE-2005-0581) : The CA License Client/Server/GCR components used in CA BrightStor ARCserve Backup 11.0 (and related CA License Server/Client software) are affected by a stack/buffer overflow when processing certain malformed or overly long GCR messages and GETCONF...

CVE-2005-0640

Computer Associates CA Unicenter Asset Management UAM 4.0 does not properly initialize the "Change Credentials for Database" window, which allows local users to recover the SQL Admin password via certain methods...

CA BrightStor ARCserve License Service GCR NETWORK Buffer Overflow

This module exploits a stack buffer overflow in Computer Associates BrightStor ARCserve Backup 11.0. By sending a specially crafted request to the lic98rmtd.exe service, an attacker could overflow the buffer and execute arbitrary code. Module Options msf use exploit/windows/brightstor/license/gcr...

CVE-2004-1697

The "Forgot your Password" link in Computer Associates CA Unicenter Management Portal 2.0 and 3.1 displays different error messages for users that exist and users that do not exist, which could allow remote attackers to guess valid usernames...

Computer Associates BrightStor ARCserve Backup backdoor account

There is backdoor account Username: x02rootx03 Password: x02j8U+Rix03...

Immunity Canvas: CAM

Name| cam ---|--- CVE| CVE-2004-1812 Exploit Pack| CANVAS Description| TNG - cam.exe Notes| CVE Name: CVE-2004-1812 VENDOR: Computer Associates VersionsAffected: run camstat: Version 1.05 Jun 8 2000 13:22 TNSVER.exe reports 2.4 Repeatability: This is a one shot exploit. Patch: Patched by...