CVE-2008-2541

CA eTrust Secure Content Manager (SCM) HTTP Gateway Service (icihttp.exe) contains multiple stack-based buffer overflow vulnerabilities when handling FTP responses (LIST and PASV). CVE-2008-2541 allows remote, unauthenticated attackers to execute arbitrary code or cause DoS with SYSTEM privileges...

CVE-2008-2541

Multiple stack-based buffer overflows in the HTTP Gateway Service icihttp.exe in CA eTrust Secure Content Manager 8.0 allow remote attackers to execute arbitrary code or cause a denial of service via long FTP responses, related to 1 the file month field in a LIST command; 2 the PASV command; and ...

CA ETrust Secure Content Manager Gateway FTP PASV Stack Overflow Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Computer Associates eTrust Secure Content Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists in the HTTP Gateway service icihttp.exe running on port 8080. By...

CA ETrust Secure Content Manager Gateway FTP LIST Stack Overflow Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Computer Associates eTrust Secure Content Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists in the HTTP Gateway service icihttp.exe running on port 8080. When...

Horde Turba 3.1.7 - Multiple Cross-Site Scripting Vulnerabilities

Horde Turba 3.1.7 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/29213/info Horde Turba is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

CVE-2008-1984

The eTrust Common Services Transport Daemon eCSqdmn in CA Secure Content Manager 8.0.28000.511 and earlier allows remote attackers to cause a denial of service crash or CPU consumption via a malformed packet to TCP port 1882...

Code injection

The eTrust Common Services Transport Daemon eCSqdmn in CA Secure Content Manager 8.0.28000.511 and earlier allows remote attackers to cause a denial of service crash or CPU consumption via a malformed packet to TCP port 1882...

CVE-2008-1984

The CVE-2008-1984 entry concerns CA eTrust Secure Content Manager (eCSqdmn, Transport Daemon) affected in 8.0.28000.511 and earlier. The flaw lets remote attackers cause a denial of service (crash or high CPU usage) by sending a malformed packet to TCP port 1882. The underlying root cause is rela...

CVE-2008-1984

The eTrust Common Services Transport Daemon eCSqdmn in CA Secure Content Manager 8.0.28000.511 and earlier allows remote attackers to cause a denial of service crash or CPU consumption via a malformed packet to TCP port 1882...

CA eTrust Secure Content Manager eCSqdmn远程拒绝服务漏洞

BUGTRAQ ID: 28888 eTrust Secure Content Manager（eTrust SCM）是独立、统一的网关解决方案，能够帮助企业从中央管理控制台防范资料窃密以及网络和信息传递威胁。 eTrust通用服务（传输）守护程序（eCSqdmn）处理用户提交的畸形数据时存在漏洞，远程攻击者可能利用此漏洞导致服务不可用。 监听在1882端口上的eTrust通用服务（传输）守护程序（eCSqdmn）没有检查客户端所传送的32位数字，如果远程攻击者在这个位置使用了畸形值的话，就会导致服务崩溃（但几秒钟后会自动重启），或触发死循环，导致100%的CPU使用率。 Compute...

Computer Associates eTrust Secure Content Manager 8.0 - eCSqdmn Remote Denial of Service

Computer Associates eTrust Secure Content Manager 8.0 - eCSqdmn Remote Denial of Service source: https://www.securityfocus.com/bid/28888/info Computer Associates eTrust Secure Content Manager is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to crash the...

Computer Associates eTrust Secure Content Manager 8.0 - 'eCSqdmn' Remote Denial of Service

source: https://www.securityfocus.com/bid/28888/info Computer Associates eTrust Secure Content Manager is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to crash the affected application, denying service to legitimate users...

Privilege escalation

Unspecified vulnerability in IBM DB2 Content Manager before 8.3 FP8 has unknown impact and attack vectors related to the AllowedTrustedLogin privilege...

CVE-2008-1681

Unspecified vulnerability in IBM DB2 Content Manager before 8.3 FP8 has unknown impact and attack vectors related to the AllowedTrustedLogin privilege...

CVE-2008-1681

Technical details about CVE-2008-1681 are not provided in the supplied documents; no affected products, vulnerable components, impact, or fixes are disclosed. Monitor for updates from official advisories.

CVE-2008-1681

Unspecified vulnerability in IBM DB2 Content Manager before 8.3 FP8 has unknown impact and attack vectors related to the AllowedTrustedLogin privilege...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Savvy Content Manager CM allow remote attackers to inject arbitrary web script or HTML via the searchterms parameter to 1 searchresults.cfm, 2 searchresults.cfm, and 3 searchresults/index.cfm. NOTE: the provenance of this information is unknown...

CVE-2008-1306

Multiple cross-site scripting XSS vulnerabilities in Savvy Content Manager CM allow remote attackers to inject arbitrary web script or HTML via the searchterms parameter to 1 searchresults.cfm, 2 searchresults.cfm, and 3 searchresults/index.cfm. NOTE: the provenance of this information is unknown...

CVE-2008-1306

This CVE (CVE-2008-1306) concerns multiple XSS vulnerabilities in Savvy Content Manager CM. The issues allow remote attackers to inject arbitrary web script or HTML via the searchterms parameter to three pages: searchresults.cfm, search_results.cfm, and search_results/index.cfm. The NVD entry lis...

CVE-2008-1306

Multiple cross-site scripting XSS vulnerabilities in Savvy Content Manager CM allow remote attackers to inject arbitrary web script or HTML via the searchterms parameter to 1 searchresults.cfm, 2 searchresults.cfm, and 3 searchresults/index.cfm. NOTE: the provenance of this information is unknown...