iDEFENSE Security Advisory 03.02.05: Computer Associates License Client PUTOLF Directory Traversal

Computer Associates License Client PUTOLF Directory Traversal iDEFENSE Security Advisory 03.02.05 www.idefense.com/application/poi/display?id=212&type=vulnerabilities March 2, 2005 I. BACKGROUND The Computer Associates License Client/Server applications provide a method for CA products to registe...

iDEFENSE Security Advisory 03.02.05: Computer Associates License Client/Server GETCONFIG Buffer Overflow

Computer Associates License Client/Server GETCONFIG Buffer Overflow iDEFENSE Security Advisory 03.02.05 www.idefense.com/application/poi/display?id=213&type=vulnerabilities March 2, 2005 I. BACKGROUND The Computer Associates License Client/Server applications provide a method for CA products to...

iDEFENSE Security Advisory 03.02.05: Computer Associates License Client and Server Invalid Command Buffer Overflow

Computer Associates License Client and Server Invalid Command Buffer Overflow iDEFENSE Security Advisory 03.02.05 www.idefense.com/application/poi/display?id=210&type=vulnerabilities March 2, 2005 I. BACKGROUND The Computer Associates License Client/Server applications provide a method for CA...

Computer Associates Licensing client and server multiple vulnerabilities

Multiple buffer overflows on different network protocol commands processing...

EEYE: Computer Associates License Manager Remote Vulnerabilities

Computer Associates License Manager Remote Vulnerabilities Release Date: 03/02/2005 Severity: High Remote Code Execution Vendor: Computer Associates Software Affected: The vulnerability exists if the CA License package version on the system is between v1.53 and v1.61.8. This package is included i...

iDEFENSE Security Advisory 03.02.05: Computer Associates License Client PUTOLF Buffer Overflow

Computer Associates License Client PUTOLF Buffer Overflow iDEFENSE Security Advisory 03.02.05 www.idefense.com/application/poi/display?id=211&type=vulnerabilities March 2, 2005 I. BACKGROUND The Computer Associates License Client/Server applications provide a method for CA products to register...

iDEFENSE Security Advisory 03.02.05: Computer Associates License Client/Server GCR Checksum Buffer Overflow

Computer Associates License Client/Server GCR Checksum Buffer Overflow iDEFENSE Security Advisory 03.02.05 www.idefense.com/application/poi/display?id=215&type=vulnerabilities March 2, 2005 I. BACKGROUND The Computer Associates License Client/Server applications provide a method for CA products t...

iDEFENSE Security Advisory 03.02.05: Computer Associates License Client/Server GCR Network Buffer Overflow

Computer Associates License Client/Server GCR Network Buffer Overflow iDEFENSE Security Advisory 03.02.05 www.idefense.com/application/poi/display?id=214&type=vulnerabilities March 2, 2005 I. BACKGROUND The Computer Associates License Client/Server applications provide a method for CA products to...

CVE-2005-0583

CVE-2005-0583 concerns the CA License Client 0.1.0.15, where a directory traversal via PUTOLF requests can create arbitrary files across the host. Public sources (NVD/NVD-derived entries and iDEFENSE advisory) confirm the vulnerability exists in CA License Client/Server components and note that a...

CVE-2005-0582

Buffer overflow in Computer Associates CA License Client 0.1.0.15 allows remote attackers to execute arbitrary code via a long filename in a PUTOLF request...

CVE-2005-0583

Directory traversal vulnerability in Computer Associates CA License Client 0.1.0.15 allows remote attackers to create arbitrary files via .. dot dot sequences in a PUTOLF request...

CVE-2005-0640

Computer Associates CA Unicenter Asset Management UAM 4.0 does not properly initialize the "Change Credentials for Database" window, which allows local users to recover the SQL Admin password via certain methods...

CVE-2005-0581

Summary of vulnerability facts (CVE-2005-0581) : The CA License Client/Server/GCR components used in CA BrightStor ARCserve Backup 11.0 (and related CA License Server/Client software) are affected by a stack/buffer overflow when processing certain malformed or overly long GCR messages and GETCONF...

CVE-2005-0581: Undefined Security Weakness

Multiple buffer overflows in Computer Associates CA License Client and Server 0.1.0.15 allow remote attackers to execute arbitrary code via 1 certain long fields in the Checksum item in a GCR request, 2 a long IP address, hostname, or netmask values in a GCR request, 3 a long last parameter in a...

CA BrightStor ARCserve License Service GCR NETWORK Buffer Overflow

This module exploits a stack buffer overflow in Computer Associates BrightStor ARCserve Backup 11.0. By sending a specially crafted request to the lic98rmtd.exe service, an attacker could overflow the buffer and execute arbitrary code. Module Options msf use exploit/windows/brightstor/license/gcr...

CVE-2004-1697

The "Forgot your Password" link in Computer Associates CA Unicenter Management Portal 2.0 and 3.1 displays different error messages for users that exist and users that do not exist, which could allow remote attackers to guess valid usernames...

Computer Associates BrightStor ARCserve Backup backdoor account

There is backdoor account Username: x02rootx03 Password: x02j8U+Rix03...

Immunity Canvas: CAM

Name| cam ---|--- CVE| CVE-2004-1812 Exploit Pack| CANVAS Description| TNG - cam.exe Notes| CVE Name: CVE-2004-1812 VENDOR: Computer Associates VersionsAffected: run camstat: Version 1.05 Jun 8 2000 13:22 TNSVER.exe reports 2.4 Repeatability: This is a one shot exploit. Patch: Patched by...

Immunity Canvas: AWSERVICES

Name| awservices ---|--- CVE| CVE-2004-1812 Exploit Pack| CANVAS Description| awservices.exe Notes| References: http://marc.info/?l=bugtraq&m=107936784030214&w=2 CVE Name: CVE-2004-1812 VENDOR: Computer Associates Notes: Remote exploit against awservices.exe - part of TNS 2.4 according to...

CVE-2004-1149

The CVE-2004-1149 issue concerns Computer Associates eTrust EZ Antivirus versions 7.0.0–7.0.4 (including 7.0.1.4). The root cause is insecure default file permissions (ACLs) applied during installation, allowing a local user to modify installed files and replace a program (notably VetMsg.exe) to ...