VYPR
← Ca

Vendor CVEs

Ca

All CVEs

274 total · sorted by risk
  • CVE-2007-0168Jan 11, 2007
    Ca
    Brightstor ARCserve Backup
    risk 0.05cvss —epss 0.20

    The Tape Engine service in Computer Associates (CA) BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/Business Protection Suite r2 allows remote attackers to execute arbitrary code via certain data in opnum 0xBF in an RPC request, which is…

  • CVE-2006-6917Dec 31, 2006
    Ca
    Brightstor ARCserve Backup
    risk 0.05cvss —epss 0.30

    Multiple buffer overflows in Computer Associates (CA) BrightStor ARCserve Backup R11.5 Server before SP2 allows remote attackers to execute arbitrary code in the Tape Engine (tapeeng.exe) via a crafted RPC request with (1) opnum 38, which is not properly handled in TAPEUTIL.dll…

  • CVE-2006-6379Dec 10, 2006
    Broadcom Corporation
    Server Protection Suite
    risk 0.05cvss —epss 0.21

    Buffer overflow in the BrightStor Backup Discovery Service in multiple CA products, including ARCserve Backup r11.5 SP1 and earlier, ARCserve Backup 9.01 up to 11.1, Enterprise Backup 10.5, and CA Server Protection Suite r2, allows remote attackers to execute arbitrary code via…

  • CVE-2004-0933Jan 27, 2005
    Ca
    eTrust Antivirus
    risk 0.05cvss —epss 0.21

    Computer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content Manager, eTrust Intrusion Detection, EZ-Armor 2.0 through 2.4, and EZ-Antivirus 6.1 through 6.3 allow remote attackers to bypass…

  • CVE-2008-2511Jun 2, 2008
    Ca
    Internet Security Suite 2008
    risk 0.04cvss —epss 0.10

    Directory traversal vulnerability in the UmxEventCli.CachedAuditDataList.1 (aka UmxEventCliLib) ActiveX control in UmxEventCli.dll in CA Internet Security Suite 2008 allows remote attackers to create and overwrite arbitrary files via a .. (dot dot) in the argument to the…

  • CVE-2007-3336Jun 22, 2007
    Ca
    Ingres
    risk 0.04cvss —epss 0.09

    Multiple "pointer overwrite" vulnerabilities in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA (formerly Computer Associates) products, allow remote attackers to execute arbitrary code by sending certain TCP data at different times to the Ingres…

  • CVE-2007-3334Jun 21, 2007
    Ca
    Etrust Secure Content Manager
    risk 0.04cvss —epss 0.10

    Multiple heap-based buffer overflows in the (1) Communications Server (iigcc.exe) and (2) Data Access Server (iigcd.exe) components for Ingres Database Server 3.0.3, as used in CA (Computer Associates) products including eTrust Secure Content Manager r8 on Windows, allow remote…

  • CVE-2007-2772May 21, 2007
    Ca
    Brightstor ARCserve Backup
    risk 0.04cvss —epss 0.12

    (1) caloggerd.exe (camt70.dll) and (2) mediasvr.exe (catirpc.dll and rwxdr.dll) in CA BrightStor Backup 11.5.2.0 SP2 allow remote attackers to cause a denial of service (NULL dereference and application crash) via a crafted RPC packet.

  • CVE-2007-1785Mar 31, 2007
    Ca
    Brightstor ARCserve Backup
    risk 0.04cvss —epss 0.15

    The RPC service in mediasvr.exe in CA BrightStor ARCserve Backup 11.5 SP2 build 4237 allows remote attackers to execute arbitrary code via crafted xdr_handle_t data in RPC packets, which is used in calculating an address for a function call, as demonstrated using the 191 (0xbf)…

  • CVE-2007-0816Feb 7, 2007
    Ca
    Brightstor ARCserve Backup
    risk 0.04cvss —epss 0.11

    The RPC Server service (catirpc.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 SP2 and earlier allows remote attackers to cause a denial of service (service crash) via a crafted TADDR2UADDR that triggers a null pointer dereference in catirpc.dll,…

  • CVE-2006-4899Sep 22, 2006
    Ca
    eTrust Security Command Center
    risk 0.04cvss —epss 0.10

    The ePPIServlet script in Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, when running on Windows, allows remote attackers to obtain the web server path via a "'" (single quote) in the PIProfile function, which leaks the path in an error message.

  • CVE-2006-4900Sep 22, 2006
    Ca
    eTrust Security Command Center
    risk 0.04cvss —epss 0.08

    Directory traversal vulnerability in Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, allows remote authenticated users to read and delete arbitrary files via ".." sequences in the eSCCAdHocHtmlFile parameter to eSMPAuditServlet, which is not…

  • CVE-2006-4901Sep 22, 2006
    Ca
    eTrust Audit
    risk 0.04cvss —epss 0.10

    Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, and eTrust Audit 1.5 and r8, allows remote attackers to spoof alerts and conduct replay attacks by invoking eTSAPISend.exe with the desired arguments.

  • CVE-2006-0306Jan 19, 2006
    Ca
    Unicenter Remote Control
    risk 0.04cvss —epss 0.12

    The DM Primer (dmprimer.exe) in the DM Deployment Common Component in Computer Associates (CA) BrightStor Mobile Backup r4.0, BrightStor ARCserve Backup for Laptops & Desktops r11.0, r11.1, r11.1 SP1, Unicenter Remote Control 6.0, 6.0 SP1, CA Desktop Protection Suite r2, CA…

  • CVE-2004-0937Feb 9, 2005
    Sophos
    Small Business Suite
    risk 0.04cvss —epss 0.15

    Sophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being…

  • CVE-2004-0935Jan 27, 2005
    Eset
    Anti-Virus
    risk 0.04cvss —epss 0.15

    Eset Anti-Virus before 1.020 (16th September 2004) allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.

  • CVE-2004-0936Jan 27, 2005
    RAV
    antivirus
    risk 0.04cvss —epss 0.15

    RAV antivirus allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.

  • CVE-2004-0934Jan 27, 2005
    Kaspersky Lab
    Kaspersky
    risk 0.04cvss —epss 0.15

    Kaspersky 3.x to 4.x allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.

  • CVE-2004-1096Jan 10, 2005
    Perl Foundation
    Archive::Zip
    risk 0.04cvss —epss 0.17

    Archive::Zip Perl module before 1.14, when used by antivirus programs such as amavisd-new, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on…

  • CVE-2014-1219Feb 14, 2014
    Ca
    2E Web Option
    risk 0.03cvss —epss 0.05

    CA 2E Web Option r8.1.2 accepts a predictable substring of a W2E_SSNID session token in place of the entire token, which allows remote attackers to hijack sessions by changing characters at the end of this substring, as demonstrated by terminating a session via a modified SSNID…

  • CVE-2010-4502Dec 8, 2010
    Ca
    Internet Security Suite 2008
    risk 0.03cvss —epss 0.01

    Integer overflow in KmxSbx.sys 6.2.0.22 in CA Internet Security Suite Plus 2010 allows local users to cause a denial of service (pool corruption) and execute arbitrary code via crafted arguments to the 0x88000080 IOCTL, which triggers a buffer overflow.

  • CVE-2009-2705Aug 11, 2009
    Ca
    Siteminder
    risk 0.03cvss —epss 0.04

    CA SiteMinder allows remote attackers to bypass cross-site scripting (XSS) protections for J2EE applications via a request containing non-canonical, "overlong Unicode" in place of blacklisted characters.

  • CVE-2009-2704Aug 11, 2009
    Ca
    Siteminder
    risk 0.03cvss —epss 0.04

    CA SiteMinder allows remote attackers to bypass cross-site scripting (XSS) protections for J2EE applications via a request containing a %00 (encoded null byte).

  • CVE-2008-1979Apr 27, 2008
    Ca
    ARCserve Backup
    risk 0.03cvss —epss 0.04

    The Discovery Service (casdscvc) in CA ARCserve Backup 12.0.5454.0 and earlier allows remote attackers to cause a denial of service (crash) via a packet with a large integer value used in an increment to TCP port 41523, which triggers a buffer over-read.

  • CVE-2007-5923Nov 10, 2007
    Ca
    eTrust SiteMinder Agent
    risk 0.03cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in forms/smpwservices.fcc in CA (formerly Computer Associates) eTrust SiteMinder Agent allows remote attackers to inject arbitrary web script or HTML via the SMAUTHREASON parameter, a different vector than CVE-2005-2204.

  • CVE-2007-5332Oct 13, 2007
    Ca
    Brightstor ARCserve Backup
    risk 0.03cvss —epss 0.05

    Multiple unspecified vulnerabilities in (1) mediasvr and (2) caloggerd in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, have unknown impact and attack vectors related to memory corruption.

  • CVE-2007-2523May 11, 2007
    Ca
    Threat Manager
    risk 0.03cvss —epss 0.01

    CA Anti-Virus for the Enterprise r8 and Threat Manager r8 before 20070510 use weak permissions (NULL security descriptor) for the Task Service shared file mapping, which allows local users to modify this mapping and gain privileges by triggering a stack-based buffer overflow in…

  • CVE-2006-6952Jan 24, 2007
    Ca
    Host Based Intrusion Prevention System
    risk 0.03cvss —epss 0.01

    Computer Associates Host Intrusion Prevention System (HIPS) drivers (1) Core kmxstart.sys 6.5.4.31 and (2) Firewall kmxfw.sys 6.5.4.10 allow local users to gain privileges by using certain privileged IOCTLs to modify callback function pointers.

  • CVE-2005-3546Nov 16, 2005
    F-Secure
    Internet Gatekeeper
    risk 0.03cvss —epss 0.01

    suid.cgi scripts in F-Secure (1) Internet Gatekeeper for Linux before 2.15.484 and (2) Anti-Virus Linux Gateway before 2.16 are installed SUID with world-executable permissions, which allows local users to gain privilege.

  • CVE-2004-0672Aug 6, 2004
    Ca
    Identityminder
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in the primary and management web interfaces in Netegrity IdentityMinder Web Edition 5.6 allows remote attackers to execute script as other users via (1) script that starts with %00 in the numOfExpressions parameter or (2) the…

  • CVE-2001-1346May 18, 2001
    Ca
    ARCserveIT
    risk 0.03cvss —epss 0.01

    Computer Associates ARCserveIT 6.61 and 6.63 (also called ARCservIT) allows local users to overwrite arbitrary files via a symlink attack on the temporary files (1) asagent.tmp or (2) inetd.tmp.

  • CVE-2000-1244Dec 31, 2000
    Broadcom Corporation
    Inoculateit Agent For Exchange
    risk 0.03cvss —epss 0.02

    Computer Associates InoculateIT Agent for Exchange Server does not recognize an e-mail virus attachment if the SMTP header is missing the "From" field, which allows remote attackers to bypass virus protection.

  • CVE-2008-1328Apr 7, 2008
    Ca
    Arcserve Backup For Laptops And Desktops
    risk 0.02cvss —epss 0.24

    Buffer overflow in the LGServer service in CA ARCserve Backup for Laptops and Desktops r11.0 through r11.5, and Suite 11.1 and 11.2, allows remote attackers to execute arbitrary code via unspecified "command arguments."

  • CVE-2007-5006Oct 1, 2007
    Ca
    Arcserve Backup For Laptops And Desktops
    risk 0.02cvss —epss 0.21

    Multiple command handlers in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 do not verify if a peer is authenticated, which allows remote attackers to add and delete users, and start client restores.

  • CVE-2007-0060Jul 26, 2007
    Ca
    Etrust Admin
    risk 0.02cvss —epss 0.24

    Stack-based buffer overflow in the Message Queuing Server (Cam.exe) in CA (formerly Computer Associates) Message Queuing (CAM / CAFT) software before 1.11 Build 54_4 on Windows and NetWare, as used in CA Advantage Data Transport, eTrust Admin, certain BrightStor products,…

  • CVE-2007-2863Jun 6, 2007
    Ca
    Anti-Virus Engine
    risk 0.02cvss —epss 0.23

    Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary code via a long filename in a .CAB file.

  • CVE-2007-2522May 11, 2007
    Ca
    inoweb Console Server
    risk 0.02cvss —epss 0.27

    Stack-based buffer overflow in the inoweb Console Server in CA Anti-Virus for the Enterprise r8, Threat Manager r8, Anti-Spyware for the Enterprise r8, and Protection Suites r3 allows remote attackers to execute arbitrary code via a long (1) username or (2) password.

  • CVE-2011-2667Jul 28, 2011
    Ca
    Gateway Security
    risk 0.01cvss —epss 0.16

    Icihttp.exe in CA Gateway Security for HTTP, as used in CA Gateway Security 8.1 before 8.1.0.69 and CA Total Defense r12, does not properly parse URLs, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and daemon crash)…

  • CVE-2011-1719Apr 27, 2011
    Ca
    Output Management Web Viewer
    risk 0.01cvss —epss 0.12

    Multiple stack-based buffer overflows in the Web Viewer ActiveX controls in CA Output Management Web Viewer 11.0 and 11.5 allow remote attackers to execute arbitrary code via (1) a long SRC property value to the PPSViewer ActiveX control in PPSView.ocx before 1.0.0.7 or (2) a…

  • CVE-2011-1655Apr 18, 2011
    Ca
    Total Defense
    risk 0.01cvss —epss 0.12

    The management.asmx module in the Management Web Service in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before SE2 sends a cleartext response to unspecified getDBConfigSettings requests, which makes it easier for remote attackers to obtain database…

  • CVE-2011-1654Apr 18, 2011
    Ca
    Total Defense
    risk 0.01cvss —epss 0.11

    Directory traversal vulnerability in the Heartbeat Web Service in CA.Itm.Server.ManagementWS.dll in the Management Server in CA Total Defense (TD) r12 before SE2 allows remote attackers to execute arbitrary code via directory traversal sequences in the GUID parameter in an…

  • CVE-2011-0758Feb 10, 2011
    Ca
    Etrust Secure Content Manager
    risk 0.01cvss —epss 0.08

    The eCS component (ECSQdmn.exe) in CA ETrust Secure Content Manager 8.0 and CA Gateway Security 8.1 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafted request to port 1882, involving an incorrect integer calculation and a…

  • CVE-2010-1223Apr 7, 2010
    Ca
    XOsoft
    risk 0.01cvss —epss 0.17

    Multiple buffer overflows in CA XOsoft r12.0 and r12.5 allow remote attackers to execute arbitrary code via (1) a malformed request to the ws_man/xosoapapi.asmx SOAP endpoint or (2) a long string to the entry_point.aspx service.

  • CVE-2009-3587Oct 13, 2009
    Ca
    eTrust Antivirus
    risk 0.01cvss —epss 0.08

    Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and…

  • CVE-2009-2026Aug 10, 2009
    Ca
    Unicenter Software Delivery
    risk 0.01cvss —epss 0.08

    Stack-based buffer overflow in a token searching function in the dtscore library in Data Transport Services in CA Software Delivery r11.2 C1, C2, C3, and SP4; Unicenter Software Delivery 4.0 C3; CA Advantage Data Transport 3.0 C1; and CA IT Client Manager r12 allows remote…

  • CVE-2008-5415Dec 11, 2008
    Ca
    ARCserve Backup
    risk 0.01cvss —epss 0.08

    The LDBserver service in the server in CA ARCserve Backup 11.1 through 12.0 on Windows allows remote attackers to execute arbitrary code via a handle_t argument to an RPC endpoint in which the argument refers to an incompatible procedure.

  • CVE-2008-4399Oct 14, 2008
    Ca
    Brightstor ARCserve Backup
    risk 0.01cvss —epss 0.08

    Unspecified vulnerability in the database engine service in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to cause a denial of service (crash) via a crafted request, related to "insufficient validation."

  • CVE-2008-4398Oct 14, 2008
    Ca
    Brightstor ARCserve Backup
    risk 0.01cvss —epss 0.08

    Unspecified vulnerability in the tape engine service in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to cause a denial of service (crash) via a crafted request.

  • CVE-2008-3175Aug 1, 2008
    Ca
    Arcserve Backup For Laptops And Desktops
    risk 0.01cvss —epss 0.14

    Integer underflow in rxRPC.dll in the LGServer service in the server in CA ARCserve Backup for Laptops and Desktops 11.0 through 11.5 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted message that triggers a buffer overflow.

  • CVE-2008-2541Jun 4, 2008
    Ca
    Etrust Secure Content Manager
    risk 0.01cvss —epss 0.10

    Multiple stack-based buffer overflows in the HTTP Gateway Service (icihttp.exe) in CA eTrust Secure Content Manager 8.0 allow remote attackers to execute arbitrary code or cause a denial of service via long FTP responses, related to (1) the file month field in a LIST command;…

Page 3 of 6