254 matches found
ZDI-08-036: CA ETrust Secure Content Manager Gateway FTP LIST Stack Overflow
ZDI-08-036: CA ETrust Secure Content Manager Gateway FTP LIST Stack Overflow http://www.zerodayinitiative.com/advisories/ZDI-08-036 June 4, 2008 -- CVE ID: CVE-2008-2541 -- Affected Vendors: Computer Associates -- Affected Products: Computer Associates eTrust Secure Content Manager -- Vulnerabili...
Stack overflow
Multiple stack-based buffer overflows in the HTTP Gateway Service icihttp.exe in CA eTrust Secure Content Manager 8.0 allow remote attackers to execute arbitrary code or cause a denial of service via long FTP responses, related to 1 the file month field in a LIST command; 2 the PASV command; and ...
CVE-2008-2541
Multiple stack-based buffer overflows in the HTTP Gateway Service icihttp.exe in CA eTrust Secure Content Manager 8.0 allow remote attackers to execute arbitrary code or cause a denial of service via long FTP responses, related to 1 the file month field in a LIST command; 2 the PASV command; and ...
CVE-2008-2541
CA eTrust Secure Content Manager (SCM) HTTP Gateway Service (icihttp.exe) contains multiple stack-based buffer overflow vulnerabilities when handling FTP responses (LIST and PASV). CVE-2008-2541 allows remote, unauthenticated attackers to execute arbitrary code or cause DoS with SYSTEM privileges...
CA ETrust Secure Content Manager Gateway FTP PASV Stack Overflow Vulnerability
This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Computer Associates eTrust Secure Content Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists in the HTTP Gateway service icihttp.exe running on port 8080. By...
CA ETrust Secure Content Manager Gateway FTP LIST Stack Overflow Vulnerability
This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Computer Associates eTrust Secure Content Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists in the HTTP Gateway service icihttp.exe running on port 8080. When...
eTrust SCM SMTP Version Detection
Binary data 4492.prm...
CVE-2008-1984
The eTrust Common Services Transport Daemon eCSqdmn in CA Secure Content Manager 8.0.28000.511 and earlier allows remote attackers to cause a denial of service crash or CPU consumption via a malformed packet to TCP port 1882...
Code injection
The eTrust Common Services Transport Daemon eCSqdmn in CA Secure Content Manager 8.0.28000.511 and earlier allows remote attackers to cause a denial of service crash or CPU consumption via a malformed packet to TCP port 1882...
CVE-2008-1984
The CVE-2008-1984 entry concerns CA eTrust Secure Content Manager (eCSqdmn, Transport Daemon) affected in 8.0.28000.511 and earlier. The flaw lets remote attackers cause a denial of service (crash or high CPU usage) by sending a malformed packet to TCP port 1882. The underlying root cause is rela...
CVE-2008-1984
The eTrust Common Services Transport Daemon eCSqdmn in CA Secure Content Manager 8.0.28000.511 and earlier allows remote attackers to cause a denial of service crash or CPU consumption via a malformed packet to TCP port 1882...
Computer Associates Alert Notification Server opcode 23 buffer overflow
Added: 04/25/2008 CVE: CVE-2007-4620 BID: 28605 OSVDB: 44040 Background The Alert Notification Server is included with multiple Computer Associates products to provide notifications to console users. Problem The Alert Notification Server is affected by buffer overflow vulnerabilities in multiple...
Computer Associates Alert Notification Server opcode 23 buffer overflow
Added: 04/25/2008 CVE: CVE-2007-4620 BID: 28605 OSVDB: 44040 Background The Alert Notification Server is included with multiple Computer Associates products to provide notifications to console users. Problem The Alert Notification Server is affected by buffer overflow vulnerabilities in multiple...
Computer Associates Alert Notification Server opcode 23 buffer overflow
Added: 04/25/2008 CVE: CVE-2007-4620 BID: 28605 OSVDB: 44040 Background The Alert Notification Server is included with multiple Computer Associates products to provide notifications to console users. Problem The Alert Notification Server is affected by buffer overflow vulnerabilities in multiple...
Computer Associates Alert Notification Server opcode 23 buffer overflow
Added: 04/25/2008 CVE: CVE-2007-4620 BID: 28605 OSVDB: 44040 Background The Alert Notification Server is included with multiple Computer Associates products to provide notifications to console users. Problem The Alert Notification Server is affected by buffer overflow vulnerabilities in multiple...
CA eTrust Secure Content Manager eCSqdmn远程拒绝服务漏洞
BUGTRAQ ID: 28888 eTrust Secure Content Manager（eTrust SCM）是独立、统一的网关解决方案，能够帮助企业从中央管理控制台防范资料窃密以及网络和信息传递威胁。 eTrust通用服务（传输）守护程序（eCSqdmn）处理用户提交的畸形数据时存在漏洞，远程攻击者可能利用此漏洞导致服务不可用。 监听在1882端口上的eTrust通用服务（传输）守护程序（eCSqdmn）没有检查客户端所传送的32位数字，如果远程攻击者在这个位置使用了畸形值的话，就会导致服务崩溃（但几秒钟后会自动重启），或触发死循环，导致100%的CPU使用率。 Compute...
eTrust Proxy Detection
Binary data 4483.prm...
CA eTrust SCM Plaintext Login Detection
Binary data 4484.prm...
Computer Associates eTrust Secure Content Manager 8.0 - 'eCSqdmn' Remote Denial of Service
source: https://www.securityfocus.com/bid/28888/info Computer Associates eTrust Secure Content Manager is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to crash the affected application, denying service to legitimate users...