CVE-2006-5172

Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates CA Brightstor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Protection Suites r2 allows remote attackers to execute arbitrary code via crafted SUNRPC packets, aka the "Mediasvr.exe String...

CVE-2006-5171

CVE-2006-5171 is a stack-based buffer overflow in the SUN RPC interface of Mediasvr.exe used by CA Brightstor ARCserve Backup (9.01–11.5), Enterprise Backup 10.5, and CA Protection Suites r2. The flaw allows remote attackers to execute arbitrary code via crafted SUNRPC packets. Related entries (e...

CVE-2006-5172

The CVE-2006-5172 entry covers a stack-based buffer overflow in the SUN RPC service (SUNRPC interface) of Mediasvr.exe within CA Brightstor ARCserve Backup 9.01–11.5, CA Enterprise Backup 10.5, and CA Protection Suites r2. The underlying flaw is a buffer overflow triggered by crafted SUNRPC packe...

CVE-2006-5171

Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates CA Brightstor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Protection Suites r2 allows remote attackers to execute arbitrary code via crafted SUNRPC packets, aka the "Mediasvr.exe Overflow...

USN-408-1: krb5 vulnerability

The server-side portion of Kerberos' RPC library had a memory management flaw which allowed users of that library to call a function pointer located in unallocated memory. By doing specially crafted calls to the kadmind server, a remote attacker could exploit this to execute arbitrary code with...

CA BrightStor ARCServe BackUp Tape Engine服务TCP/6502端口远程溢出漏洞

BrightStor ARCserve Backup可为各种平台的服务器提供备份和恢复保护功能。 BrightStor ARCserve Backup在处理TCP/6502端口上的畸形请求时存在漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 默认监听于TCP/6502端口的BrightStor ARCserve Backup的Tape Engine服务（tapeeng.exe）没有正确地使用vsprintf。在62b93df0-8b02-11ce-876c-00805f842837接口上Opnum...

MIT Kerberos 5 RPC库远程代码执行漏洞

Kerberos是一款广泛使用的使用强壮的加密来验证客户端和服务器端的网络协议。MIT Kerberos 5是一种常用的开源Kerberos实现。 Kerberos的管理守护程序kadmind所使用的RPC库在释放内存中结构时对xprt-xpauth指针的处理存在漏洞，果远程攻击者能够发送恶意的kerberos报文的话，就会触发这个漏洞，导致拒绝服务或执行任意代码。 MIT Kerberos 5 1.5 - 1.5.1 MIT Kerberos 5 1.4 - 1.4.4 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

ZDI-07-002: CA BrightStor ARCserve Backup Tape Engine Code Execution Vulnerability

ZDI-07-002: CA BrightStor ARCserve Backup Tape Engine Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-002.html January 11, 2007 -- CVE ID: CVE-2007-0168 -- Affected Vendor: Computer Associates -- Affected Products: BrightStor ARCserve Backup r11.5 BrightStor ARCser...

ZDI-07-004: CA BrightStor ARCserve Backup Tape Engine Buffer Overflow Vulnerability

ZDI-07-004: CA BrightStor ARCserve Backup Tape Engine Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-004.html January 11, 2007 -- CVE ID: CVE-2007-0169 -- Affected Vendor: Computer Associates -- Affected Products: BrightStor ARCserve Backup r11.5 BrightStor...

ZDI-07-003: CA BrightStor ARCserve Backup Message Engine Buffer Overflow Vulnerability

ZDI-07-003: CA BrightStor ARCserve Backup Message Engine Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-003.html January 11, 2007 -- CVE ID: CVE-2007-0169 -- Affected Vendor: Computer Associates -- Affected Products: BrightStor ARCserve Backup r11.5 BrightStor...

CA BrightStor ARCserve Backup Tape Engine RPC buffer overflow

Overview The Computer Associates BrightStor ARCserve Backup Tape Engine RPC service contains a buffer overflow vulnerability. If successfully exploited, this vulnerability may allow a remote attacker to execute arbitrary code. Description BrightStor ARCserve Backup is a backup and data retention...

CA BrightStor ARCserve Backup Tape Engine directly calls user supplied data in RPC requests

Overview The Computer Associates BrightStor ARCserve Backup Tape Engine contains a vulnerability in its Tape Engine RPC service. If successfully exploited, this vulnerability may allow a remote attacker to execute arbitrary code. Description BrightStor ARCserve Backup is a backup and data retenti...

CA BrightStor ARCserve Backup Message Engine RPC buffer overflow

Overview The Computer Associates BrightStor ARCserve Backup Message Engine contains a buffer overflow vulnerability. If successfully exploited, this vulnerability may allow a remote attacker to execute arbitrary code. Description BrightStor ARCserve Backup is a backup and data retention tool that...

LS-20061002 - Computer Associates BrightStor ARCserve Backup Remote Code Execution Vulnerability

LS-20061002 LSsec has discovered a vulnerability in Computer Associates BrightStor ARCserve Backup v11.5, which could be exploited by an anonymous attacker in order to execute arbitrary code with SYSTEM privileges on an affected system. The flaw specifically exists within the Tape Engine...

Cross site request forgery (csrf)

The Tape Engine service in Computer Associates CA BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/Business Protection Suite r2 allows remote attackers to execute arbitrary code via certain data in opnum 0xBF in an RPC request, which is directly executed...

Buffer overflow

Multiple buffer overflows in Computer Associates CA BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/Business Protection Suite r2 allow remote attackers to execute arbitrary code via RPC requests with crafted data for opnums 1 0x2F and 2 0x75 in the a Message...

CVE-2007-0169

Multiple buffer overflows in Computer Associates CA BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/Business Protection Suite r2 allow remote attackers to execute arbitrary code via RPC requests with crafted data for opnums 1 0x2F and 2 0x75 in the a Message...

CVE-2007-0169

Multiple buffer overflows in Computer Associates CA BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/Business Protection Suite r2 allow remote attackers to execute arbitrary code via RPC requests with crafted data for opnums 1 0x2F and 2 0x75 in the a Message...

CVE-2006-6917

Multiple buffer overflows in Computer Associates CA BrightStor ARCserve Backup R11.5 Server before SP2 allows remote attackers to execute arbitrary code in the Tape Engine tapeeng.exe via a crafted RPC request with 1 opnum 38, which is not properly handled in TAPEUTIL.dll 11.5.3884.0, or 2 opnum...

CA BrightStor ARCserve Backup Tape Engine Code Execution Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Computer Associates BrightStor ARCserve Backup. User interaction is not required to exploit this vulnerability. The specific flaw exists in the handling of RPC requests to the Tape Engine service which...