CA DSM gui_cm_ctrls.ocx ActiveX控件远程代码执行漏洞

BUGTRAQ ID: 28809 CVECAN ID: CVE-2008-1786 CA桌面和服务器管理（DSM）产品中包含多种应用，分别用来执行软件分发、远程控制和资产管理任务。 DSM产品所提供的guicmctrls ActiveX控件没有充分的验证函数输入，如果用户受骗访问了恶意网页的话就可能导致拒绝服务或在WEB浏览器会话中执行任意代码。 Computer Associates guicmctrls.ocx 11.2.3.1896 Computer Associates guicmctrls.ocx 11.2.2000.4 Computer Associates...

Computer Associates Alert Notification Buffer Overflow

This module exploits a buffer overflow in Computer Associates Threat Manager for the Enterprise r8.1 By sending a specially crafted RPC request, an attacker could overflow the buffer and execute arbitrary code. In order to successfully exploit this vulnerability, you will need valid logon...

CVE-2007-4620

CA Alert Notification Server (Alert.exe) in multiple CA products (Anti-Virus for the Enterprise, Threat Manager, BrightStor ARCserve Backup) is affected by a buffer overflow in the Alert Notification Service triggered by crafted RPC requests. CVE-2007-4620 affects CA Alert Notification components...

iDefense Security Advisory 04.03.08: Computer Associates Alert Notification Service Multiple RPC Buffer Overflow Vulnerabilities

iDefense Security Advisory 04.03.08 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 03, 2008 I. BACKGROUND Computer Associates Alert Notification Server is used by several CA products, including eTrust Integrated Threat Management, to provide notifications to console users. II...

iDefense Security Advisory 04.03.08: Computer Associates Alert Notification Service Multiple RPC Buffer Overflow Vulnerabilities

iDefense Security Advisory 04.03.08 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 03, 2008 I. BACKGROUND Computer Associates Alert Notification Server is used by several CA products, including eTrust Integrated Threat Management, to provide notifications to console users. II...

CA BrightStor 'AddColumn()' ListCtrl.ocx ActiveX Control Buffer Overflow Vulnerability

Description The Unicenter DSM r11 List Control ATX ActiveX control, included with CA BrightStor ARCserve Backup, is prone to a buffer-overflow vulnerability because it fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. An attacker can exploit this issu...

Computer Associates eTrust Threat Management控制台HTML注入漏洞

Computer Associates eTrust Integrated Threat Management是一款基于Web的安全威胁管理中央控制台。 CA eTrust Integrated Threat Management控制台不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行HTML注入攻击，获得敏感信息。 问题是对IP地址的数据缺少过滤，可造成HTML注入攻击。 Computer Associates eTrust Integrated Threat Management 8.0 目前没有解决方案提供：...

CA BrightStor ARCserve Backup Message Engine Insecure Method Exposure Vulnerability

This vulnerability allows attackers to arbitrarily access and modify the file system and registry of vulnerable installations of Computer Associates BrightStor ARCserve Backup. Authentication is not required to exploit this vulnerability. The specific flaws exists in the Message Engine RPC servic...

Computer Associates SiteMinder - Web Agent Smpwservices.FCC Cross-Site Scripting

Computer Associates SiteMinder - Web Agent Smpwservices.FCC Cross-Site Scripting source: https://www.securityfocus.com/bid/26375/info Computer Associates SiteMinder Web Agent is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting...

Computer Associates SiteMinder - Web Agent Smpwservices.FCC Cross-Site Scripting

source: https://www.securityfocus.com/bid/26375/info Computer Associates SiteMinder Web Agent is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue allows attackers to execute arbitrary HTML or script code in a user's...

CVE-2000-1244

CVE-2000-1244 affects the Computer Associates InoculateIT Agent for Exchange Server. The underlying issue is that the product does not recognize a virus attachment when the SMTP header is missing the “From” field, allowing remote attackers to bypass virus protection. The NVD entry assigns a CVSS ...

CVE-2000-1244

Computer Associates InoculateIT Agent for Exchange Server does not recognize an e-mail virus attachment if the SMTP header is missing the "From" field, which allows remote attackers to bypass virus protection...

TPTI-07-16: CA BrightStor Hierarchical Storage Manager Buffer Overflow Vulnerabilities

TPTI-07-16: CA BrightStor Hierarchical Storage Manager Buffer Overflow Vulnerabilities http://dvlabs.tippingpoint.com/advisory/TPTI-07-16.html October 2, 2007 -- CVE ID: CVE-2007-5082 -- Affected Vendor: Computer Associates -- Affected Products: BrightStor Hierarchical Storage Manager r11.5 --...

CVE-2007-5083

Multiple integer overflows in Computer Associates CA BrightStor Hierarchical Storage Manager HSM before r11.6 allow remote attackers to execute arbitrary code via unspecified CsAgent service commands that trigger a heap-based buffer overflow...

Integer overflow

Integer overflow in CA Computer Associates BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allows remote attackers to execute arbitrary code via a long username and a certain "useless" password...

CVE-2007-5084

Multiple SQL injection vulnerabilities in Computer Associates CA BrightStor Hierarchical Storage Manager HSM before r11.6 allow remote attackers to execute arbitrary SQL commands via CsAgent service commands with opcodes 1 0x07, 2 0x08, 3 0x09, 4 0x1E, 5 0x32, 6 0x36, 7 0x40, and possibly others...

Stack overflow

Multiple stack-based buffer overflows in CA Computer Associates BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allow remote attackers to execute arbitrary code via a long 1 username or 2 password to the rxrLogin command in rxRPC.dll, or a long 3 username argument to the...

Sql injection

Multiple SQL injection vulnerabilities in Computer Associates CA BrightStor Hierarchical Storage Manager HSM before r11.6 allow remote attackers to execute arbitrary SQL commands via CsAgent service commands with opcodes 1 0x07, 2 0x08, 3 0x09, 4 0x1E, 5 0x32, 6 0x36, 7 0x40, and possibly others...

Integer overflow

Multiple integer overflows in Computer Associates CA BrightStor Hierarchical Storage Manager HSM before r11.6 allow remote attackers to execute arbitrary code via unspecified CsAgent service commands that trigger a heap-based buffer overflow...

CVE-2007-5082

Multiple stack-based buffer overflows in Computer Associates CA BrightStor Hierarchical Storage Manager HSM before r11.6 allow remote attackers to execute arbitrary code via unspecified CsAgent service commands with certain opcodes, related to missing validation of a length parameter...