CVE-2007-0816

The RPC Server service catirpc.exe in CA formerly Computer Associates BrightStor ARCserve Backup 11.5 SP2 and earlier allows remote attackers to cause a denial of service service crash via a crafted TADDR2UADDR that triggers a null pointer dereference in catirpc.dll, possibly related to null...

Null pointer dereference

The RPC Server service catirpc.exe in CA formerly Computer Associates BrightStor ARCserve Backup 11.5 SP2 and earlier allows remote attackers to cause a denial of service service crash via a crafted TADDR2UADDR that triggers a null pointer dereference in catirpc.dll, possibly related to null...

CVE-2007-0816

CVE-2007-0816 affects CA BrightStor ARCserve Backup 11.5 SP2 and earlier; the RPC Server (catirpc.dll) can be remotely triggered via a crafted TADDR2UADDR to cause a null pointer dereference, leading to a denial of service. Vulnerable component: catirpc.dll in the RPC Server service; attack path ...

CVE-2007-0816

The RPC Server service catirpc.exe in CA formerly Computer Associates BrightStor ARCserve Backup 11.5 SP2 and earlier allows remote attackers to cause a denial of service service crash via a crafted TADDR2UADDR that triggers a null pointer dereference in catirpc.dll, possibly related to null...

CA BrightStor ARCserve 11.5.2.0 - catirpc.dll RPC Server Denial of Service

CA BrightStor ARCserve 11.5.2.0 - catirpc.dll RPC Server Denial of Service !/usr/bin/ruby Computer Associates CA Brightstor Backup Remote Procedure Call Server DoS catirpc.dll Catirpc.exe - Provides the endpoint mapper and enables RPC services for BrightStor Backup products. 7c.350: Access...

CA BrightStor ARCserve 11.5.2.0 (catirpc.dll) RPC Server DoS Exploit

Exploit for unknown platform in category dos / poc ==================================================================== CA BrightStor ARCserve 11.5.2.0 catirpc.dll RPC Server DoS Exploit ==================================================================== !/usr/bin/ruby Computer Associates CA...

BrightStor ARCserve Message Engine RPC server buffer overflow

Added: 11/09/2006 CVE: CVE-2006-5143 BID: 20365 OSVDB: 29535 Background The BrightStor ARCserve Backup family of products includes a Message Engine which listens for connections on port 6503/TCP. Problem A buffer overflow in the ASCORE.dll library allows remote attackers to execute arbitrary...

BrightStor ARCserve Message Engine RPC server buffer overflow

Added: 11/09/2006 CVE: CVE-2006-5143 BID: 20365 OSVDB: 29535 Background The BrightStor ARCserve Backup family of products includes a Message Engine which listens for connections on port 6503/TCP. Problem A buffer overflow in the ASCORE.dll library allows remote attackers to execute arbitrary...

CA多个产品消息引擎RPC服务器多个缓冲区溢出漏洞

Computer Associates是世界领先的安全厂商，产品包括多种杀毒软件及备份恢复系统。 CA多个产品的消息引擎处理用户请求时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 ASCORE.dll是CA多个产品的消息引擎RPC服务器所使用的DLL。当消息引擎（msgeng.exe）在处理TCP 6503端口ID为dc246bf0-7a7a-11ce-9f88-00805fe43838的端点上的RPC请求时，可能会触发一个堆溢出和一个栈溢出。有漏洞的操作分别是由这个端口上的Opnum 43和Opnum...

CVE-2006-5143

Multiple buffer overflows in CA BrightStor ARCserve Backup r11.5 SP1 and earlier, r11.1, and 9.01; BrightStor ARCserve Backup for Windows r11; BrightStor Enterprise Backup 10.5; Server Protection Suite r2; and Business Protection Suite r2 allow remote attackers to execute arbitrary code via craft...

CVE-2006-5143

Multiple buffer overflows in CA BrightStor ARCserve Backup r11.5 SP1 and earlier, r11.1, and 9.01; BrightStor ARCserve Backup for Windows r11; BrightStor Enterprise Backup 10.5; Server Protection Suite r2; and Business Protection Suite r2 allow remote attackers to execute arbitrary code via craft...

CVE-2006-5143

CVE-2006-5143 affects Computer Associates BrightStor ARCserve Backup and related Protection Suite products. The vulnerabilities are buffer overflows in multiple components: the Backup Agent RPC Server (DBASVR.exe) via RPC opcodes 0x01/0x02/0x18 on TCP 6071; the Message Engine RPC Server (msgeng.e...

Computer Associates Products Message Engine RPC Server - Multiple Buffer Overflow Vulnerabilities (2)

Computer Associates Products Message Engine RPC Server - Multiple Buffer Overflow Vulnerabilities 2 source: https://www.securityfocus.com/bid/20365/info Multiple Computer Associates products are prone to multiple buffer-overflow vulnerabilities because the applications using an affected library...

CA Multiple Product Message Engine RPC Server Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Computer Associates BrightStor ARCserve Backup, Enterprise Backup, Server Protection Suite and Business Protection Suite. Authentication is not required to exploit this vulnerability. The problem...

Computer Associates Products Message Engine RPC Server - Multiple Buffer Overflow Vulnerabilities (2)

source: https://www.securityfocus.com/bid/20365/info Multiple Computer Associates products are prone to multiple buffer-overflow vulnerabilities because the applications using an affected library fail to properly bounds-check user-supplied input before copying it to an insufficiently sized memory...

CentOS 3 / 4 : php (CESA-2005:748)

Updated PHP packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A bug was discovered in the PEAR XML-RP...

CVE-2006-2380

Microsoft Windows 2000 SP4 does not properly validate an RPC server during mutual authentication over SSL, which allows remote attackers to spoof an RPC server, aka the "RPC Mutual Authentication Vulnerability."...

CVE-2006-2380

Microsoft Windows 2000 SP4 does not properly validate an RPC server during mutual authentication over SSL, which allows remote attackers to spoof an RPC server, aka the "RPC Mutual Authentication Vulnerability."...

[EEYEB20051011A] - Microsoft Distributed Transaction Coordinator Heap Overflow

Microsoft Distributed Transaction Coordinator Heap Overflow http://www.eeye.com/html/research/advisories/AD20060509a.html Release Date: May 9, 2006 Date Reported: October 11, 2005 Patch Development Time In Days: 210 Severity: High Remote Code Execution Systems Affected: Windows NT 4.0 Windows 200...

[EEYEB20050708] Microsoft Distributed Transaction Coordinator Memory Modification Vulnerability

Microsoft Distributed Transaction Coordinator Memory Modification Vulnerability Release Date: October 11, 2005 Date Reported: July 8, 2005 Severity: High Remote Code Execution Vendor: Microsoft Systems Affected: Windows 2000 Server SP0 - SP4 - Vulnerable - Anonymous remotely exploitable by defaul...