Priority HIGH 82
Multiple stack-based buffer overflows in the SUN RPC service in CA (formerly Computer Associates) BrightStor ARCserve Media Server, as used in BrightStor ARCserve Backup 9.01 through 11.5 SP2, BrightStor Enterprise Backu…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.77996 · Published 2007-04-25 · No fix listed
Priority HIGH 81
Buffer overflow in the Tape Engine (tapeeng.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to execute arbitrary code via certain RPC requests to TCP port 650…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.723 · Published 2006-11-24 · No fix listed
Priority HIGH 73
Multiple buffer overflows in CA BrightStor ARCserve Backup r11.5 SP1 and earlier, r11.1, and 9.01; BrightStor ARCserve Backup for Windows r11; BrightStor Enterprise Backup 10.5; Server Protection Suite r2; and Business P…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.79407 · Published 2006-10-06 · No fix listed CWE-119
Priority HIGH 71
Multiple stack-based buffer overflows in Computer Associates (CA) Alert Notification Service (Alert.exe) 8.1.586.0, 8.0.450.0, and 7.1.758.0, as used in multiple CA products including Anti-Virus for the Enterprise 7.1 th…
CVSS 2.0HIGH 9.0· Network · Low privileges · Interaction — · EPSS 0.52274 · Published 2008-04-07 · No fix listed CWE-119
Priority HIGH 69
Stack-based buffer overflow in the Backup Agent for Microsoft SQL Server in BrightStor ARCserve Backup Agent for SQL Server 11.0 allows remote attackers to execute arbitrary code via a long string sent to port (1) 6070 o…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.66121 · Published 2005-08-05 · No fix listed
Priority HIGH 65
Buffer overflow in the UniversalAgent for Computer Associates (CA) BrightStor ARCserve Backup allows remote authenticated users to cause a denial of service or execute arbitrary code via an agent request to TCP port 6050…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.51805 · Published 2005-04-12 · No fix listed
Priority MEDIUM 63
Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary code via a long filename in a .CAB file.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.23405 · Published 2007-06-06 · No fix listed
Priority MEDIUM 61
Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before 4.0.051230, allows remote attackers to execute arbitrary code via an HTTP reque…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.18599 · Published 2006-01-23 · No fix listed CWE-119
Priority MEDIUM 58
Integer underflow in rxRPC.dll in the LGServer service in the server in CA ARCserve Backup for Laptops and Desktops 11.0 through 11.5 allows remote attackers to execute arbitrary code or cause a denial of service via a c…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.144 · Published 2008-08-01 · No fix listed CWE-189
Priority MEDIUM 57
Directory traversal vulnerability in caloggerd in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allows remote attackers to append arbitrary data to arbitrary files via directory traversal sequences in unspecified in…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.11942 · Published 2008-05-21 · No fix listed CWE-22
Priority MEDIUM 57
Multiple buffer overflows in (1) RPC and (2) rpcx.dll in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allow remote attackers to execute arbitrary code via unspecified vectors.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.11882 · Published 2007-10-13 · No fix listed CWE-119
Priority MEDIUM 55
Queue.dll for the message queuing service (LQserver.exe) in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows remote attackers to execute arbitrary code via a malformed ONRPC protocol…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.09897 · Published 2007-10-13 · No fix listed CWE-94
Priority MEDIUM 55
Multiple stack-based buffer overflows in the RPC implementation in alert.exe before 8.0.255.0 in CA (formerly Computer Associates) Alert Notification Server, as used in Threat Manager for the Enterprise, Protection Suite…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.14029 · Published 2007-07-18 · No fix listed
Priority MEDIUM 53
Integer overflow in Computer Associates Vet Antivirus library, as used by CA InoculateIT 6.0, eTrust Antivirus r6.0 through 7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content Manager, eTrust Intru…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06886 · Published 2005-05-24 · No fix listed
Priority MEDIUM 48
Multiple buffer overflows in xdr functions in the server in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allow remote attackers to execute arbitrary code, as demonstrated by a stack-based buffer overflow via a long…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.14716 · Published 2008-05-21 · No fix listed CWE-119
Priority MEDIUM 48
(1) caloggerd.exe (camt70.dll) and (2) mediasvr.exe (catirpc.dll and rwxdr.dll) in CA BrightStor Backup 11.5.2.0 SP2 allow remote attackers to cause a denial of service (NULL dereference and application crash) via a craf…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.12057 · Published 2007-05-21 · No fix listed
Priority MEDIUM 47
Unspecified vulnerability in dbasvr in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, has unknown impact and attack vectors related to memory corruption.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.02236 · Published 2007-10-13 · No fix listed CWE-399
Priority MEDIUM 47
The RPC service in mediasvr.exe in CA BrightStor ARCserve Backup 11.5 SP2 build 4237 allows remote attackers to execute arbitrary code via crafted xdr_handle_t data in RPC packets, which is used in calculating an address…
CVSS 2.0HIGH 7.1· Network · Low privileges · Interaction — · EPSS 0.1546 · Published 2007-03-31 · No fix listed
Priority LOW 26
arclib.dll before 7.3.0.9 in CA Anti-Virus (formerly eTrust Antivirus) 8 and certain other CA products allows remote attackers to cause a denial of service (infinite loop and loss of antivirus functionality) via an inval…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.03568 · Published 2007-07-26 · No fix listed