CA Host-Based Intrusion Prevention System 'XMLSecDB' ActiveX Control Code Execution Vulnerability

This host is installed with CA Host-Based Intrusion Prevention SystemHIPS and is prone to a remote code-execution vulnerability. OpenVAS Vulnerability Test $Id: gbcahipsactivexctrlcodeexecvuln.nasl 6517 2017-07-04 13:34:20Z cfischer $ CA Host-Based Intrusion Prevention System 'XMLSecDB' ActiveX...

ZDI-11-093: CA Internet Security Suite HIPS XML Security Database Parser Class Remote Code Execution Vulnerability

ZDI-11-093: CA Internet Security Suite HIPS XML Security Database Parser Class Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-093 February 23, 2011 -- CVE ID: CVE-2011-1036 -- CVSS: 9.3, AV:N/AC:M/Au:N/C:C/I:C/A:C -- Affected Vendors: CA -- Affected Product...

CA Internet Security Suite HIPS XML Security Database Parser Class Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of CA Internet Security Suite 2010. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw exists within the...

CA Internet Security Suite Plus 'KmxSbx.sys' Buffer Overflow Vulnerability

This host is installed with CA Internet Security Suite Plus and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodcainternetsecuritysuitebofvuln.nasl 7019 2017-08-29 11:51:27Z teissa $ CA Internet Security Suite Plus 'KmxSbx.sys' Buffer Overflow Vulnerability Author...

CA Internet Security Suite Plus 'KmxSbx.sys' Buffer Overflow Vulnerability

CA Internet Security Suite Plus is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Document Capture - 'empop3.dll' Insecure Methods

Source: http://packetstormsecurity.org/files/view/97868/DSECRG-11-005.txt ActiveX components contain insecure methods. Digital Security Research Group DSecRG Advisory DSECRG-11-005 internal DSECRG-00154 Application: Oracle Document Capture Versions Affected: Release 10gR3 Vendor URL: www.oracle.c...

Integer overflow

Integer overflow in KmxSbx.sys 6.2.0.22 in CA Internet Security Suite Plus 2010 allows local users to cause a denial of service pool corruption and execute arbitrary code via crafted arguments to the 0x88000080 IOCTL, which triggers a buffer overflow...

CVE-2010-4502

The provided connected documents confirm CVE-2010-4502 affecting CA Internet Security Suite Plus 2010, specifically the driver KmxSbx.sys 6.2.0.22. The vulnerability is a buffer overflow caused by an integer overflow in KmxSbx.sys when processing IOCTL 0x88000080, allowing local users to trigger ...

CVE-2010-4502

Integer overflow in KmxSbx.sys 6.2.0.22 in CA Internet Security Suite Plus 2010 allows local users to cause a denial of service pool corruption and execute arbitrary code via crafted arguments to the 0x88000080 IOCTL, which triggers a buffer overflow...

How ZeuS Trojan Infects and Steals Money: What You Need to Know

You can get a ZeuS infection through a drive-by download from a malicious website or a hacked legitimate site. Clicking a link in an innocent-looking email can also open your system to attack. This past week, there was a surge of fake LinkedIn connection requests linked to ZeuS. While savvy users...

CA Internet Security Suite 2010 - 'KmxSbx.sys' Kernel Pool Overflow

/ Exploit Title: CA Internet Security Suite 2010 KmxSbx.sys Kernel Pool Overflow 0-day Exploit Date: 2010-11-28 Author: Nikita Tarakanov CISS Research Team Software Link: http://shop.ca.com/ca/products/internetsecurity/internetsecuritysuite.asp Version: up to date, KmxSbx.sys version 6.2.0.22...

CA Internet Security Suite 2010 - KmxSbx.sys Kernel Pool Overflow

CA Internet Security Suite 2010 - KmxSbx.sys Kernel Pool Overflow / Exploit Title: CA Internet Security Suite 2010 KmxSbx.sys Kernel Pool Overflow 0-day Exploit Date: 2010-11-28 Author: Nikita Tarakanov CISS Research Team Software Link:...

Avira Premium Security Suite - NtCreateKey Race Condition

Avira Premium Security Suite - NtCreateKey Race Condition 1.Description: The avipbb.sys kernel driver distributed with Avira Premium Security Suite contains a race condition vulnerability in the handling paramaters of NtCreatekey function. Exploitation of this issue allows an attacker to crash...

AlienVault OSSIM Web Front End Detection

The AlienVault Open Source Security Information Management OSSIM web front end was detected on the remote host. OSSIM is a suite of security tools used to monitor and maintain a network. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid42336; scriptversion"1.12";...

PT-2009-5870 · Ca · Ca Anti-Virus For The Enterprise +3

Name of the Vulnerable Software and Affected Versions: CA Anti-Virus for the Enterprise versions 7.1 through r8.1 CA Anti-Virus 2007 through 2009 CA eTrust EZ Antivirus version r7.1 CA Internet Security Suite 2007 through Plus 2009 Description: The issue is related to a crafted RAR archive file...

PT-2009-5869 · Ca · Ca Anti-Virus For The Enterprise +3

Name of the Vulnerable Software and Affected Versions: CA Anti-Virus for the Enterprise versions 7.1 through r8.1 CA Anti-Virus 2007 through 2009 CA eTrust EZ Antivirus version r7.1 CA Internet Security Suite 2007 through Plus 2009 Description: The issue is related to a crafted RAR archive file...

CA杀毒引擎arclib库多个内存破坏漏洞

BUGTRAQ ID: 36653 CVE ID: CVE-2009-3587,CVE-2009-3588 Computer Associates是世界领先的安全厂商，产品包括多种杀毒软件及备份恢复系统。 多个CA产品杀毒引擎所使用的arclib组件在解析畸形RAR压缩文件时存在堆或栈内存破坏，用户受骗打开恶意文件就会导致拒绝服务或执行任意指令。 Computer Associates eTrust Intrusion Detection 3.0 SP1 Computer Associates eTrust Intrusion Detection 3.0 Computer...

[PT-2009-05] CA Internet Security Suite Denial of Service Vulnerability

---------------------------------------------------------------------- PT-2009-05 Positive Technologies Security Advisory CA Internet Security Suite Denial of Service Vulnerability ---------------------------------------------------------------------- --- Affected Software CA Internet Security...

CA Internet Security Suite vetmonnt.sys驱动本地拒绝服务漏洞

BUGTRAQ ID: 36077 CVECAN ID: CVE-2009-0682 CA Internet Security Suite是为家庭用户提供的综合网络安全解决方案。 Internet Security Suite所使用的vetmonnt.sys驱动没有正确地验证IOCTL调用，本地攻击者可以通过提交恶意的IOCTL请求导致内核崩溃。 Computer Associates Internet Security Suite r5 Computer Associates Internet Security Suite r4 Computer Associates Internet...

Code injection

vetmonnt.sys in CA Internet Security Suite r3, vetmonnt.sys before 9.0.0.184 in Internet Security Suite r4, and vetmonnt.sys before 10.0.0.217 in Internet Security Suite r5 do not properly verify IOCTL calls, which allows local users to cause a denial of service system crash via a crafted call...