Immunity Canvas: AWSERVICES

Name| awservices ---|--- CVE| CVE-2004-1812 Exploit Pack| CANVAS Description| awservices.exe Notes| References: http://marc.info/?l=bugtraq&m=107936784030214&w=2 CVE Name: CVE-2004-1812 VENDOR: Computer Associates Notes: Remote exploit against awservices.exe - part of TNS 2.4 according to...

CVE-2004-1149

The CVE-2004-1149 issue concerns Computer Associates eTrust EZ Antivirus versions 7.0.0–7.0.4 (including 7.0.1.4). The root cause is insecure default file permissions (ACLs) applied during installation, allowing a local user to modify installed files and replace a program (notably VetMsg.exe) to ...

iDEFENSE Security Advisory 12.15.04: Computer Associates eTrust EZ Antivirus Insecure File Permission Vulnerability

Computer Associates eTrust EZ Antivirus Insecure File Permission Vulnerability iDEFENSE Security Advisory 12.15.04 http://www.idefense.com/application/poi/display?id=164 December 15, 2004 I. BACKGROUND Computer Associates eTrust EZ Antivirus is antivirus protection software for home and business...

CVE-2004-0933

CVE-2004-0933 affects Computer Associates CA InoculateIT 6.0, eTrust Antivirus (r6.0–r7.1), eTrust Antivirus for the Gateway (r7.0–r7.1), eTrust Secure Content Manager, eTrust Intrusion Detection, EZ-Armor (2.0–2.4), and EZ-Antivirus (6.1–6.3). The issue is a ZIP header handling flaw that lets re...

Multiple AntiVirus - .zip Detection Bypass

Multiple AntiVirus - .zip Detection Bypass / zipbrk.c - Proof-of-Concept for CAN-2004-0932 - CAN-2004-0937 Copyright C 2004 oc.192 This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation...

[SA12639] Computer Associates Unicenter Common Services Password Disclosure

TITLE: Computer Associates Unicenter Common Services Password Disclosure SECUNIA ADVISORY ID: SA12639 VERIFY ADVISORY: http://secunia.com/advisories/12639/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: Local system SOFTWARE: CA Unicenter ServicePlus Service Desk 6.x...

CVE-2003-0996

Unknown "System Security Vulnerability" in Computer Associates CA Unicenter Remote Control URC 6.0 allows attackers to gain privileges via the help interface...

CVE-2003-0997

Unknown "Denial of Service Attack" vulnerability in Computer Associates CA Unicenter Remote Control URC 6.0 allows attackers to cause a denial of service CPU consumption in URC host service...

CVE-2003-0998

Unknown "potential system security vulnerability" in Computer Associates CA Unicenter Remote Control 5.0 through 5.2, and ControlIT 5.0 and 5.1, may allow attackers to gain privileges to the local system account...

CVE-2003-0997

CVE-2003-0997 refers to an unknown denial-of-service flaw in Computer Associates’ Unicenter Remote Control (URC) 6.0. The vulnerability allows an attacker to trigger CPU consumption in the URC host service, potentially impacting availability. Public detail is limited in the provided documents; a ...

CVE-2003-0996

CVE-2003-0996 concerns an unknown “System Security Vulnerability” in Computer Associates (CA) Unicenter Remote Control (URC) 6.0 that could allow a local attacker to gain privileges via the help interface. The NVD entry assigns a CVSSv2 base score of 4.6 (MEDIUM) with LOCAL attack vector and part...

CVE-2003-0996

Unknown "System Security Vulnerability" in Computer Associates CA Unicenter Remote Control URC 6.0 allows attackers to gain privileges via the help interface...

CVE-2003-0998

Unknown "potential system security vulnerability" in Computer Associates CA Unicenter Remote Control 5.0 through 5.2, and ControlIT 5.0 and 5.1, may allow attackers to gain privileges to the local system account...

CVE-2003-0997

Unknown "Denial of Service Attack" vulnerability in Computer Associates CA Unicenter Remote Control URC 6.0 allows attackers to cause a denial of service CPU consumption in URC host service...

CA Unicenter Password Recovery Tool

List, The following can also be found at: http://www.kufumo.com/releases/ca-passwordrecover.txt Thanks, Tor Houghton ; $Id: ca-passwordrecover.txt,v 1.3 2003/05/20 10:46:51 torh Exp $ Computer Associates "Asset Manager" Password Recovery Tool c 2003 Tor Houghton th at kufumo dot com ++Synopsis++...

CVE-2001-0960

ARCserve for NT 6.61 SP2a and ARCserve 2000 7.0 store the backup agent username and password in cleartext in the aremote.dmp file on the ARCSERVE$ hidden share. The Nessus plugin item ARCSERVE_HIDDEN_SHARE.NASL confirms the ARCSERVE$ share is accessible and that multiple ARCserve versions retain ...

CVE-2001-0959

The CVE-2001-0959 entry concerns Computer Associates ARCserve for NT 6.61 SP2a and ARCserve 2000 7.0, which create a hidden administrative share named ARCSERVE$. This behavior enables remote attackers to access sensitive information and to overwrite critical files. The vulnerability is described ...

CVE-2001-0959

Computer Associates ARCserve for NT 6.61 SP2a and ARCserve 2000 7.0 creates a hidden share named ARCSERVE$, which allows remote attackers to obtain sensitive information and overwrite critical files...

CVE-2002-1598

Buffer overflows in Computer Associates MLink CA-MLink 6.5 and earlier may allow local users to execute arbitrary code via long command line arguments to 1 mlclear or 2 mllock...

CVE-2001-0625

The CVE-2001-0625 issue affects Computer Associates InoculateIT 6.0, where ftpdownload is vulnerable to a local symlink attack on /tmp/ftpdownload.log. This allows a local attacker to overwrite arbitrary files. The vulnerability is triggered by manipulating filesystem paths used by ftpdownload, e...