CVE-2007-2139

CVE-2007-2139 is a real vulnerability affecting CA BrightStor ARCserve Media Server (and related BrightStor ARCserve Backup/Enterprise components). Connected sources describe a stack-based buffer overflow in the MediaSrv SUN RPC handling caused by insufficient boundary checks when processing craf...

CVE-2008-1979

The CVE-2008-1979 issue affects CA ARCserve Backup Discovery Service (casdscvc) in CA ARCserve Backup 12.0.5454.0 and earlier. A remote attacker can trigger a denial-of-service (crash) by sending a crafted packet that uses a large integer in an increment to TCP port 41523, resulting in a buffer o...

CVE-2007-1785

CVE-2007-1785 is a remote code execution vulnerability in CA BrightStor ARCserve Backup Media Server (mediasvr.exe) caused by improper handling of RPC SUN RPC requests (xdr_handle_t) in the Mediasvr service. It affects BrightStor ARCserve Backup Media Server components across multiple versions (n...

CVE-2007-2864

CVE-2007-2864 describes a stack-based buffer overflow in the Computer Associates (CA) Anti-Virus engine when processing CAB archives. The vulnerability exists in the CAB file handling prior to content update 30.6, allowing a remote attacker to execute arbitrary code by delivering a specially craf...

CVE-2007-2863

CVE-2007-2863 is a stack-based buffer overflow in the CA Anti-Virus engine (and related CA products) caused by insufficient bounds checking on filenames in CAB archives. A remote attacker can trigger the overflow via a long filename in a CAB file, potentially executing arbitrary code. Affected pr...

CVE-2004-0935

CVE-2004-0935 affects Eset Anti-Virus prior to 1.020. A ZIP archive with both local and global headers set to zero could bypass antivirus protection and allow a malicious file to be opened on the target system. PoC/proofs of concept code and advisories (e.g., iDEFENSE CAN references) document det...

CVE-2004-0936

CVE-2004-0936 refers to a ZIP header manipulation vulnerability affecting anti-virus engines (notably RAV) where both local and global ZIP headers can be set to zero, allowing a compressed file to bypass protection and still be opened. The connected sources describe a proof-of-concept and public ...

CVE-2006-6076

Summary: CVE-2006-6076 is a buffer overflow in CA BrightStor ARCserve Backup’s Tape Engine (tapeeng.exe) that can be triggered by remote RPC requests over TCP port 6502, leading to potentially remote code execution on affected systems. Affected products include BrightStor ARCserve Backup versions...

CVE-2005-0349

The CVE-2005-0349 entry covers BrightStor ARCserve Backup 11.1 UniversalAgent for UNIX, where the production release contains hard-coded credentials that enable remote access to the file system and may allow execution of arbitrary commands. Connected details specify a default/admin-like account w...

CVE-2006-6379

CVE-2006-6379 affects the BrightStor ARCserve Backup Discovery Service. A buffer overflow in the ASBRDCST.DLL discovery component allows remote attackers to execute arbitrary code via specially crafted packets sent to the Discovery Service. Affected products include BrightStor ARCserve Backup (r1...

CVE-2004-0932

The CVE-2004-0932 issue affects McAfee Anti-Virus Engine DATS drivers before 4398 (and the DATS Driver before 4397). A crafted ZIP archive with both local and global headers set to zero can bypass antivirus protection and still be opened on the target system. This is a remote-exploitation-style b...

CVE-2004-0937

CVE-2004-0937 affects Sophos Anti-Virus prior to 3.87.0 and Sophos Anti-Virus for Windows 95/98/Me prior to 3.88.0. The issue allows remote attackers to bypass antivirus protection by delivering a ZIP archive whose local and global headers are set to zero, yet the archive can still be opened on t...

CVE-2004-0933

CVE-2004-0933 affects Computer Associates CA InoculateIT 6.0, eTrust Antivirus (r6.0–r7.1), eTrust Antivirus for the Gateway (r7.0–r7.1), eTrust Secure Content Manager, eTrust Intrusion Detection, EZ-Armor (2.0–2.4), and EZ-Antivirus (6.1–6.3). The issue is a ZIP header handling flaw that lets re...

CVE-2006-5143

CVE-2006-5143 affects Computer Associates BrightStor ARCserve Backup and related Protection Suite products. The vulnerabilities are buffer overflows in multiple components: the Backup Agent RPC Server (DBASVR.exe) via RPC opcodes 0x01/0x02/0x18 on TCP 6071; the Message Engine RPC Server (msgeng.e...

CVE-2004-0934

CVE-2004-0934 affects Kaspersky antivirus engines 3.x through 4.x. The connected material shows a ZIP archive header manipulation vulnerability where both the local and global headers can be set to zero, allowing the compressed file to be opened while bypassing protection. A PoC exists in ZIP han...

CVE-2004-1096

Archive::Zip (Perl) before 1.14 is affected; antivirus tools like amavisd-new can bypass protection by processing a ZIP with both local and global headers zeroed. The description notes the issue but does not specify fixed versions or patches in the provided sources. No exploitation details are gi...

CVE-2008-2242

CA BrightStor ARCserve Backup (aka BrightStor ARCserve Backup) is affected by CVE-2008-2242 via a buffer overflow in the xdr_rwsstring function used by SUN-RPC services. The vulnerability allows remote attackers to execute arbitrary code and is demonstrated by stack-based/overrun conditions when ...

CVE-2007-3875

CVE-2007-3875 : A DoS in CA/ eTrust Antivirus products caused by arclib.dll when processing a malformed CHM file. An invalid “previous listing chunk number” in CHM triggers an infinite loop, halting antivirus functionality. Affected CA products include CA Anti-Virus for the Enterprise (formerly e...

CVE-2007-5328

CA BrightStor ARCserve Backup (Message Engine RPC) contains CVE-2007-5328: insecure privileged function exposure through RPC calls in the Message Engine service. A remote attacker can modify the file system and registry and potentially take full control of affected systems. Affected products incl...

CVE-2007-0168

CVE-2007-0168 affects the Tape Engine RPC service in CA BrightStor ARCserve Backup (versions 9.01–11.5, Enterprise Backup 10.5, CA Server/Business Protection Suite r2). The flaw arises from the RPC handler for opnum 0xBF, which directly executes user-supplied data, enabling remote attackers to ex...

CVE-2007-1447

CVE-2007-1447 affects CA BrightStor ARCserve Backup Tape Engine (versions 11.5 and earlier). The vulnerability arises from memory corruption caused by improper data validation when processing RPC or stub data in the Tape Engine, enabling a remote attacker to cause DoS or potentially execute arbit...

CVE-2005-2535

CVE-2005-2535 is a buffer overflow in the CA BrightStor ARCserve Backup Discovery Service (versions 9.0–11.1) that allows remote attackers to execute arbitrary commands via a large packet sent to TCP port 41523. The Connected documents confirm exploit context via public PoCs and Metasploit/Exploi...

CVE-2007-1448

The CVE-2007-1448 issue affects CA BrightStor ARCserve Backup Tape Engine (and related components) prior to 11.5, where an RPC call can disable the Tape Engine interface, causing DoS. Related advisories describe additional remote-execution/DoS vectors via the Tape Engine and Portmapper, including...

CVE-2005-3653

CVE-2005-3653 describes a heap-based buffer overflow in the CA iTechnology iGateway service, caused by insufficient boundary checks of the HTTP Content-Length header. An unauthenticated remote attacker can send a crafted HTTP request with a negative Content-Length to trigger a heap overflow, pote...

CVE-2006-5171

CVE-2006-5171 is a stack-based buffer overflow in the SUN RPC interface of Mediasvr.exe used by CA Brightstor ARCserve Backup (9.01–11.5), Enterprise Backup 10.5, and CA Protection Suites r2. The flaw allows remote attackers to execute arbitrary code via crafted SUNRPC packets. Related entries (e...

CVE-2007-5327

The CVE-2007-5327 issue is a stack-based overflow in the CA BrightStor ARCserve Backup Message Engine RPC interface (mediasvr.exe) that can allow remote code execution via opnum 0x10d. Affected products include BrightStor ARCserve Backup from v9.01 to R11.5 and BrightStor Enterprise Backup r10.5,...

CVE-2007-0169

CA BrightStor ARCserve Backup (including Tape Engine and Message Engine RPC services) contains buffer overflow vulnerabilities triggered by crafted RPC requests. The flaws arise from insufficient validation of user-supplied data in RPC messages, permitting remote, unauthenticated attackers to pot...

CVE-2006-5172

The CVE-2006-5172 entry covers a stack-based buffer overflow in the SUN RPC service (SUNRPC interface) of Mediasvr.exe within CA Brightstor ARCserve Backup 9.01–11.5, CA Enterprise Backup 10.5, and CA Protection Suites r2. The underlying flaw is a buffer overflow triggered by crafted SUNRPC packe...

CVE-2007-4620

CA Alert Notification Server (Alert.exe) in multiple CA products (Anti-Virus for the Enterprise, Threat Manager, BrightStor ARCserve Backup) is affected by a buffer overflow in the Alert Notification Service triggered by crafted RPC requests. CVE-2007-4620 affects CA Alert Notification components...

CVE-2007-0816

CVE-2007-0816 affects CA BrightStor ARCserve Backup 11.5 SP2 and earlier; the RPC Server (catirpc.dll) can be remotely triggered via a crafted TADDR2UADDR to cause a null pointer dereference, leading to a denial of service. Vulnerable component: catirpc.dll in the RPC Server service; attack path ...

CVE-2007-3825

CA Alert Notification Server (alert.exe) is affected by multiple stack-based buffer overflows in its RPC handling, prior to version 8.0.255.0, used across Threat Manager for the Enterprise, Protection Suites, BrightStor ARCserve Backup, and BrightStor Enterprise Backup. The vulnerabilities allow ...

CVE-2008-3175

CVE-2008-3175 involves an integer/buffer overflow in the LGServer component (rxRPC.dll) of CA ARCserve Backup for Laptops and Desktops. All versions 11.0–11.5 are affected, with the LGServer service vulnerable to a crafted inbound message that can cause a buffer/underflow and allow a remote attac...

CVE-2006-5142

CVE-2006-5142 describes a stack-based buffer overflow in CA BrightStor ARCserve Backup R11.5 client and server caused by processing long messages to the CheyenneDS Mailslot. The vulnerability allows remote attackers to execute arbitrary code on Windows systems hosting the BrightStor components. P...

CVE-2007-5332

CA BrightStor ARCserve Backup contains multiple remote vulnerabilities (including CVE-2007-5332) affecting mediasvr and caloggerd across versions 9.01–11.5 and Enterprise Backup r10.5. The issues stem from memory corruption in RPC argument processing, enabling a remote attacker to cause denial of...

CVE-2007-5330

CVE-2007-5330 affects CA BrightStor ARCserve Backup and BrightStor Enterprise Backup on Windows. The cadbd RPC service is vulnerable to remote code execution via stack-based buffer overflows in unspecified RPC procedures, and to memory corruption from handling of RPC arguments as pointers. Exploi...

CVE-2007-5325

CVE-2007-5325 and related CVEs describe multiple remote vulnerabilities in CA BrightStor ARCserve Backup and BrightStor Enterprise Backup (v9.01–R11.5, Enterprise Backup r10.5, and related Windows components). The core issues include: (1) buffer overflows in the Message Engine and AScore.dll, and...

CVE-2007-5329

CVE-2007-5329 describes a memory corruption vulnerability in CA BrightStor ARCserve Backup components (notably dbasvr.exe and related RPC/server processes) across multiple versions (v9.01 through R11.5, and Enterprise Backup r10.5). The root cause is memory corruption during processing of RPC/arg...

CVE-2008-2241

CA ARCserve Backup caloggerd directory traversal (CVE-2008-2241) affects ARCserve Backup r11.0, r11.1 and r11.5. The root cause is insufficient path verification when processing log messages, allowing a remote attacker to append data to arbitrary files via directory traversal sequences, potential...

CVE-2005-0260

CVE-2005-0260 is a stack-based buffer overflow in the CA BrightStor ARCserve Backup Discovery Service. A large UDP 41524 packet can overflow the stack, enabling remote code execution on vulnerable systems. Public references and exploit listings (e.g., Metasploit modules for Discovery Service UDP ...

CVE-2007-5326

CA BrightStor ARCserve Backup contains multiple remote vulnerabilities (CVE-2007-5326 among others) due to RPC string/buffer overflows in components such as RPC and rpcx.dll. A remote attacker could potentially execute arbitrary code on affected systems (Windows platforms) by manipulating RPC inp...

CVE-2007-5331

CVE-2007-5331 affects CA BrightStor ARCserve Backup and BrightStor Enterprise Backup. The vulnerability lies in queue.dll used by the message queuing service (LQserver.exe), where a malformed ONRPC request for operation 0x76 can cause memory corruption in lqserver/media services, enabling remote ...