Broadcom: Security Vulnerabilities
ftpdownload in Computer Associates InoculateIT 6.0 allows a local attacker to overwrite arbitrary files via a symlink attack on /tmp/ftpdownload.log .
CVSS Score
7.2
EPSS Score
0.001
Published
2001-08-22
Computer Associates CCC\Harvest 5.0 for Windows NT/2000 uses weak encryption for passwords, which allows a remote attacker to gain privileges on the application.
CVSS Score
7.5
EPSS Score
0.004
Published
2001-06-18
Computer Associates ARCserveIT 6.61 and 6.63 (also called ARCservIT) allows local users to overwrite arbitrary files via a symlink attack on the temporary files (1) asagent.tmp or (2) inetd.tmp.
CVSS Score
1.2
EPSS Score
0.006
Published
2001-05-18
Computer Associates InoculateIT Agent for Exchange Server does not recognize an e-mail virus attachment if the SMTP header is missing the "From" field, which allows remote attackers to bypass virus protection.
CVSS Score
7.5
EPSS Score
0.039
Published
2000-12-31
The default installation of eTrust Access Control (formerly SeOS) uses a default encryption key, which allows remote attackers to spoof the eTrust administrator and gain privileges.
CVSS Score
10.0
EPSS Score
0.01
Published
2000-10-20
eTrust Intrusion Detection System (formerly SessionWall-3) uses weak encryption (XOR) to store administrative passwords in the registry, which allows local users to easily decrypt the passwords.
CVSS Score
2.1
EPSS Score
0.001
Published
2000-06-07
AV Option for MS Exchange Server option for InoculateIT 4.53, and possibly other versions, only scans the Inbox folder tree of a Microsoft Exchange server, which could allow viruses to escape detection if a user's rules cause the message to be moved to a different mailbox.
CVSS Score
7.5
EPSS Score
0.005
Published
1999-05-12
ARCserve NT agents use weak encryption (XOR) for passwords, which allows remote attackers to sniff the authentication request to port 6050 and decrypt the password.
CVSS Score
10.0
EPSS Score
0.005
Published
1999-02-21
Local or remote users can force ControlIT 4.5 to reboot or force a user to log out, resulting in a denial of service.
CVSS Score
5.0
EPSS Score
0.007
Published
1999-01-01
The installation of 1ArcServe Backup and Inoculan AV client modules for Exchange create a log file, exchverify.log, which contains usernames and passwords in plaintext.
CVSS Score
4.6
EPSS Score
0.006
Published
1998-11-12