CVSS: 9.3EPSS: 93%CPEs: 30EXPL: 3CVE-2008-1472 – CA BrightStor ARCserve Backup - 'AddColumn()' ActiveX Buffer Overflow
https://notcve.org/view.php?id=CVE-2008-1472
Stack-based buffer overflow in the ListCtrl ActiveX Control (ListCtrl.ocx), as used in multiple CA products including BrightStor ARCserve Backup R11.5, Desktop Management Suite r11.1 through r11.2, and Unicenter products r11.1 through r11.2, allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a long argument to the AddColumn method. Un desbordamiento de búfer en la región stack de la memoria en el control ActiveX ListCtrl (ListCtrl.ocx), como es usado en varios productos de CA, incluyendo BrightStor ARCserve Backup versión R11.5, Desktop Management Suite versiones r11.1 hasta r11.2 y productos Unicenter versiones r11.1 hasta r11. 2, permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (bloqueo) por medio de un argumento largo en el método AddColumn. The CA BrightStor ARCserve Backup ActiveX control (ListCtrl.ocx) is vulnerable to a stack-based buffer overflow. By passing an overly long argument to the AddColumn() method, a remote attacker could overflow a buffer and execute arbitrary code on the system. • https://www.exploit-db.com/exploits/16577 https://www.exploit-db.com/exploits/5264 http://community.ca.com/blogs/casecurityresponseblog/archive/2008/3/28.aspx http://secunia.com/advisories/29408 http://www.securityfocus.com/archive/1/489893/100/0/threaded http://www.securityfocus.com/archive/1/490263/100/0/threaded http://www.securityfocus.com/bid/28268 http://www.securitytracker.com/id?1019617 http://www.vupen.com/english/advisories/2008/0902/references https://exchange. • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 1%CPEs: 18EXPL: 0CVE-2006-6641
https://notcve.org/view.php?id=CVE-2006-6641
Unspecified vulnerability in CA CleverPath Portal before maintenance version 4.71.001_179_060830, as used in multiple products including BrightStor Portal r11.1, CleverPath Aion BPM r10 through r10.2, eTrust Security Command Center r1 and r8, and Unicenter, does not properly handle when multiple Portal servers are started at the same time and share the same data store, which might cause a Portal user to inherit the session and credentials of a user who is on another Portal server. Vulnerabilidad no especificada en CA CleverPath Portal anterior a la versión de mantenimiento 4.71.001_179_060830, usado en múltiples productos incluyendo BrightStor Portal r11.1, CleverPath Aion BPM r10 hasta r10.2, eTrust Security Command Center r1 y r8, y Unicenter, no actúa adecuadamente cuando múltiples servidores Portal son iniciados al mismo tiempo y comparten el mismo almacén de información, lo cual puede provocar que un usuario de Portal herede la sesión y credenciales de un usuario que está en otro servidor Portal. • http://secunia.com/advisories/23426 http://securitytracker.com/id?1017429 http://supportconnectw.ca.com/public/ca_common_docs/cpportal_secnot.asp http://www.osvdb.org/30854 http://www.securityfocus.com/archive/1/455041/100/0/threaded http://www.securityfocus.com/bid/21681 http://www.vupen.com/english/advisories/2006/5091 http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34876 •