[Full-disclosure] Layered Defense Advisory: Format String Vuln in CA eTrust

=============================================================== Layered Defense Advisory 27 June 2006 =============================================================== 1 Affected Software Computer Associates: eTrust Antivirus 8.0 Computer Associates: eTrust PestPatrol 8.0 Computer Associates:...

CVE-2006-3223

The CVE-2006-3223 issue affects CA ITM, eTrust Antivirus (eAV), and eTrust PestPatrol (ePP) version 8.0. It is a format string vulnerability in the scan job description field that can crash the process and potentially execute arbitrary code. The vulnerability arises from improper handling of form...

CVE-2006-3223

Format string vulnerability in CA Integrated Threat Management ITM, eTrust Antivirus eAV, and eTrust PestPatrol ePP r8 allows attackers to cause a denial of service crash and possibly execute arbitrary code via a scan job with format strings in the description field...

[VulnWatch] iDefense Security Advisory 01.23.06: Computer Associates iTechnology iGateway Service Content-Length Buffer Overflow Vulnerability

Computer Associates iTechnology iGateway Service Content-Length Buffer Overflow Vulnerability iDefense Security Advisory 01.23.06 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=376 January 23, 2006 I. BACKGROUND iTechnology is an integration technology which provides standard...

[Full-disclosure] CAID 33778 - CA iGateway Content-Length Buffer Overflow Vulnerability

Title: CAID 33778 - CA iGateway Content-Length Buffer Overflow Vulnerability CA Vulnerability ID: 33778 CA Advisory Date: 2006-01-23 Discovered By: Erika Mendoza reported this issue to iDefense. Impact: Remote attacker can execute arbitrary code with SYSTEM privileges. Summary: The CA iGateway...

CVE-2005-3372

Multiple interpretation error in eTrust CA 7.0.1.4 with the 11.9.1 engine allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could...

CVE-2005-3372

Multiple interpretation error in eTrust CA 7.0.1.4 with the 11.9.1 engine allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could...

CVE-2005-3372

The CVE-2005-3372 entry concerns eTrust CA 7.0.1.4 (11.9.1 engine). The vulnerability arises from a magic byte bug: files with an unsuspecting extension (e.g., BAT, HTML, EML) containing an MZ EXE-like signature are treated as safe types but can still execute as dangerous content. This bypasses v...

CVE-2005-3225

Multiple interpretation error in unspecified versions of 1 eTrust-Iris and 2 eTrust-Vet Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as...

CVE-2005-3225

Multiple interpretation error in unspecified versions of 1 eTrust-Iris and 2 eTrust-Vet Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as...

[Full-disclosure] CAID 33485 - Computer Associates iGateway debug mode HTTP GET request buffer overflow vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: Computer Associates iGateway debug mode HTTP GET request buffer overflow vulnerability CA Vulnerability ID: 33485 Discovery Date: 2005-10-06 CA Advisory Date: 2005-10-14 Discovered By: EMendoza Impact: Remote attacker can execute arbitrary code...

CVE-2004-2305

CVE-2004-2305 affects Computer Associates eTrust Antivirus EE 6.0–7.0. The vulnerability allows a remote attacker to bypass scanning by including a password-protected file inside a ZIP archive, which causes eTrust to scan only the password-protected file and skip the other files in the archive. T...

CVE-2004-2305

Computer Associates eTrust Antivirus EE 6.0 through 7.0 allows remote attackers to bypass virus scanning by including a password-protected file in a ZIP file, which causes eTrust to scan only the password protected file and skip the other files...

CVE-2005-2204

Cross-site scripting XSS vulnerability in Computer Associates CA eTrust SiteMinder 5.5, when the "CSSChecking" parameter is set to "NO," allows remote attackers to inject arbitrary web script or HTML via the 1 PASSWORD or 2 BUFFER parameters to smpwservicescgi.exe, 3 the TARGET parameter to...

CVE-2005-2204

CVE-2005-2204 describes a cross-site scripting vulnerability in CA eTrust SiteMinder 5.5. When CSSChecking is set to NO, an attacker can inject arbitrary script/HTML through parameters to smpwservicescgi.exe (PASSWORD, BUFFER) and login.fcc (TARGET), and possibly other vectors. This affects SiteM...

CVE-2005-2204

Cross-site scripting XSS vulnerability in Computer Associates CA eTrust SiteMinder 5.5, when the "CSSChecking" parameter is set to "NO," allows remote attackers to inject arbitrary web script or HTML via the 1 PASSWORD or 2 BUFFER parameters to smpwservicescgi.exe, 3 the TARGET parameter to...

CA eTrust Intrusion Detection CPImportKey Function Overflow DoS

The remote host is running CA eTrust Intrusion Detection System, a security solution with intrusion detection, antivirus, web filtering and session monitoring. The remote version of this software is affected by a denial of service vulnerability in the way it uses 'CPImportKey' function. An attack...

CA eTrust Intrusion Detection System Detection

The remote host is running the CA eTrust Intrusion Detection System service. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid18536; scriptversion"1.16"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06"; scriptnameenglish:"CA eTrust Intrusion...

CVE-2005-1693

CVE-2005-1693 involves an integer overflow in the Computer Associates Vet Antivirus library used by CA InoculateIT 6.0, eTrust Antivirus (r6.0–7.1), eTrust Antivirus for the Gateway (r7.0–r7.1), eTrust Secure Content Manager, eTrust Intrusion Detection, BrightStor ARCserve Backup r11.1, Vet Antiv...

[Full-disclosure] Computer Associates Vet Antivirus Library Remote Heap Overflow

Date May 23, 2005 Vulnerability Computer Associates Vet library provides antivirus scan engine capabilities. Vet scan engines allow products to analyze various streams for malware. Vet is vulnerable to an integer wrap during the analysis of an OLE stream. The integer wrap causes an arbitrary heap...