Computer Associates Alert Notification Server opcode 23 buffer overflow

Added: 04/25/2008 CVE: CVE-2007-4620 BID: 28605 OSVDB: 44040 Background The Alert Notification Server is included with multiple Computer Associates products to provide notifications to console users. Problem The Alert Notification Server is affected by buffer overflow vulnerabilities in multiple...

CA eTrust Secure Content Manager eCSqdmn远程拒绝服务漏洞

BUGTRAQ ID: 28888 eTrust Secure Content Manager（eTrust SCM）是独立、统一的网关解决方案，能够帮助企业从中央管理控制台防范资料窃密以及网络和信息传递威胁。 eTrust通用服务（传输）守护程序（eCSqdmn）处理用户提交的畸形数据时存在漏洞，远程攻击者可能利用此漏洞导致服务不可用。 监听在1882端口上的eTrust通用服务（传输）守护程序（eCSqdmn）没有检查客户端所传送的32位数字，如果远程攻击者在这个位置使用了畸形值的话，就会导致服务崩溃（但几秒钟后会自动重启），或触发死循环，导致100%的CPU使用率。 Compute...

CA eTrust SCM Plaintext Login Detection

Binary data 4484.prm...

eTrust SCM SMTP Version Detection

Binary data 4485.prm...

eTrust Proxy Detection

Binary data 4483.prm...

Computer Associates eTrust Secure Content Manager 8.0 - 'eCSqdmn' Remote Denial of Service

source: https://www.securityfocus.com/bid/28888/info Computer Associates eTrust Secure Content Manager is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to crash the affected application, denying service to legitimate users...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in CA formerly Computer Associates eTrust Threat Management Console allow remote attackers to inject arbitrary web script or HTML via the IP Address field and other unspecified fields...

CVE-2007-6406

CVE-2007-6406 describes multiple cross-site scripting (XSS) vulnerabilities in CA (formerly Computer Associates) eTrust Threat Management Console. The flaws let remote attackers inject arbitrary web script or HTML through the IP Address field and other unspecified inputs, potentially enabling scr...

CVE-2007-6406: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in CA formerly Computer Associates eTrust Threat Management Console allow remote attackers to inject arbitrary web script or HTML via the IP Address field and other unspecified fields...

Computer Associates eTrust Threat Management控制台HTML注入漏洞

Computer Associates eTrust Integrated Threat Management是一款基于Web的安全威胁管理中央控制台。 CA eTrust Integrated Threat Management控制台不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行HTML注入攻击，获得敏感信息。 问题是对IP地址的数据缺少过滤，可造成HTML注入攻击。 Computer Associates eTrust Integrated Threat Management 8.0 目前没有解决方案提供：...

CVE-2007-5923

Cross-site scripting XSS vulnerability in forms/smpwservices.fcc in CA formerly Computer Associates eTrust SiteMinder Agent allows remote attackers to inject arbitrary web script or HTML via the SMAUTHREASON parameter, a different vector than CVE-2005-2204...

CVE-2007-5923

Cross-site scripting XSS vulnerability in forms/smpwservices.fcc in CA formerly Computer Associates eTrust SiteMinder Agent allows remote attackers to inject arbitrary web script or HTML via the SMAUTHREASON parameter, a different vector than CVE-2005-2204...

CVE-2007-5923

The CVE-2007-5923 entry describes a Cross-site scripting (XSS) vulnerability in CA eTrust SiteMinder components, specifically in forms/smpwservices.fcc, exposed via the SMAUTHREASON parameter. The vulnerability affects the SiteMinder Agent/web components and could allow an attacker to inject arbi...

CVE-2007-5923: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in forms/smpwservices.fcc in CA formerly Computer Associates eTrust SiteMinder Agent allows remote attackers to inject arbitrary web script or HTML via the SMAUTHREASON parameter, a different vector than CVE-2005-2204...

CVE-2002-2285

Vulnerability summary: In eTrust InoculateIT 6.0, enabling the "Incremental Scan" option may certify a file as virus-free before it is fully downloaded, allowing a bypass of virus detection. Affected product/version: eTrust InoculateIT 6.0. Root cause / behavior: premature virus validation during...

CVE-2002-2285

eTrust InoculateIT 6.0 with the "Incremental Scan" option enabled may certify that a file is free of viruses before the file has been completely downloaded, which allows remote attackers to bypass virus detection...

CVE-2002-2285: Undefined Security Weakness

eTrust InoculateIT 6.0 with the "Incremental Scan" option enabled may certify that a file is free of viruses before the file has been completely downloaded, which allows remote attackers to bypass virus detection...

Code injection

The web console in CA formerly Computer Associates eTrust ITM Threat Manager 8.1 allows remote attackers to redirect users to arbitrary web sites via a crafted HTTP URL on port 6689...

CVE-2007-5437

The web console in CA formerly Computer Associates eTrust ITM Threat Manager 8.1 allows remote attackers to redirect users to arbitrary web sites via a crafted HTTP URL on port 6689...

CVE-2007-5439

CA formerly Computer Associates eTrust ITM Threat Manager 8.1 stores sensitive user information in log files with predictable names, which allows remote attackers to obtain this information via unspecified vectors...