EUVD-2010-1251

Malware in sbrugna...

EUVD-2010-3960

Malware in sbrugna...

CVE-2010-3984

Buffer overflow in mngcorecom.dll in CA XOsoft Replication r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft High Availability r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft Content Distribution r12.0 SP1 and r12.5 SP2 rollup, and CA ARCserve Replication and High Availability RHA r15.0 SP1 allows remote...

Buffer overflow

Buffer overflow in mngcorecom.dll in CA XOsoft Replication r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft High Availability r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft Content Distribution r12.0 SP1 and r12.5 SP2 rollup, and CA ARCserve Replication and High Availability RHA r15.0 SP1 allows remote...

CVE-2010-3984

CVE-2010-3984 is a buffer overflow flaw in CA XOsoft/ARCserve components (mng_core_com.dll) exploited via crafted create_session_bab SOAP requests to xosoapapi.asmx. Affected products include XOsoft Replication (r12.0 SP1, r12.5 SP2 rollups), XOsoft High Availability (r12.0 SP1, r12.5 SP2 rollups...

CVE-2010-3984

Buffer overflow in mngcorecom.dll in CA XOsoft Replication r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft High Availability r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft Content Distribution r12.0 SP1 and r12.5 SP2 rollup, and CA ARCserve Replication and High Availability RHA r15.0 SP1 allows remote...

CA XOsoft buffer overflow

Buffer overflow on SOAP request parsing...

CA20101209-01: Security Notice for CA XOsoft

-----BEGIN PGP SIGNED MESSAGE----- CA20101209-01: Security Notice for CA XOsoft Issued: December 9, 2010 CA Technologies support is alerting customers to a security risk with CA XOsoft. A vulnerability exists that can allow a remote attacker to execute arbitrary code. CA has issued a patch to...

Update Protection against CA XOsoft Multiple Products xosoapapi.asmx Buffer Overflow

A buffer overflow vulnerability exists in CA XOsoft Multiple Products. The XOsoft software is a suite of programs which include a control system, engine, web server and a shell. The vulnerability is due to insufficient boundary checking when handling a parameter in an HTTP request. An attacker ca...

CA XOsoft Control Service entry_point.aspx Remote Code Execution

Added: 06/07/2010 CVE: CVE-2010-1223 BID: 39238 OSVDB: 63611 Background CA XOsoft is storage and recovery management software that includes applications for combined business continuity and disaster recovery. The CA XOsoft product family includes CA XOsoft Replication, CA XOsoft High Availability...

CA XOsoft Control Service entry_point.aspx Remote Code Execution

Added: 06/07/2010 CVE: CVE-2010-1223 BID: 39238 OSVDB: 63611 Background CA XOsoft is storage and recovery management software that includes applications for combined business continuity and disaster recovery. The CA XOsoft product family includes CA XOsoft Replication, CA XOsoft High Availability...

CA XOsoft Control Service entry_point.aspx Remote Code Execution

Added: 06/07/2010 CVE: CVE-2010-1223 BID: 39238 OSVDB: 63611 Background CA XOsoft is storage and recovery management software that includes applications for combined business continuity and disaster recovery. The CA XOsoft product family includes CA XOsoft Replication, CA XOsoft High Availability...

CA XOsoft Control Service entry_point.aspx Remote Code Execution

Added: 06/07/2010 CVE: CVE-2010-1223 BID: 39238 OSVDB: 63611 Background CA XOsoft is storage and recovery management software that includes applications for combined business continuity and disaster recovery. The CA XOsoft product family includes CA XOsoft Replication, CA XOsoft High Availability...

Computer Associates XOsoft Multiple Flaws (CA20100406) (credentialed check)

XOsoft, a product from Computer Associates for combined business continuity and disaster recovery, is installed on the remote Windows host. According to its version, it is affected by several vulnerabilities. - By sending a specially crafted SOAP request, it may be possible for an unauthenticated...

Computer Associates XOsoft SOAP Request Username Enumeration (CA20100406)

The remote web server is a component of XOsoft, a product from Computer Associates for combined business continuity and disaster recovery. The installed version of this service does not require authentication when handling SOAP requests to enumerate user names. An unauthenticated, remote attacker...

DSquare Exploit Pack: D2SEC_CAXOSOFT

Name| d2seccaxosoft ---|--- CVE| CVE-2010-1223 Exploit Pack| D2ExploitPack Description| CA XOsoft Control Service entrypoint.aspx Remote Stack Overflow Vulnerability Notes|...

CVE-2010-1222

CA XOsoft r12.5 does not properly perform authentication, which allows remote attackers to obtain potentially sensitive information via a SOAP request...

CVE-2010-1223

Multiple buffer overflows in CA XOsoft r12.0 and r12.5 allow remote attackers to execute arbitrary code via 1 a malformed request to the wsman/xosoapapi.asmx SOAP endpoint or 2 a long string to the entrypoint.aspx service...

Buffer overflow

Multiple buffer overflows in CA XOsoft r12.0 and r12.5 allow remote attackers to execute arbitrary code via 1 a malformed request to the wsman/xosoapapi.asmx SOAP endpoint or 2 a long string to the entrypoint.aspx service...

Design/Logic Flaw

CA XOsoft r12.0 and r12.5 does not properly perform authentication, which allows remote attackers to enumerate usernames via a SOAP request...