Ca vulnerabilitiesNone on the known-exploited list.
Ca has 138 published vulnerabilities across 247 products in our catalogue. None of them is on the list of flaws known to be exploited today. The most affected product is Brightstor Arcserve Backup, with 19. If you run Ca software, patch the exploited flaws first.
We keep watching the known-exploited list.
Which Ca products have the most vulnerabilities?
Brightstor Arcserve Backup leads with 19 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Ca vulnerabilities are being exploited?
This is the list that matters most: flaws criminals are using now.
None of Ca's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.
Which Ca flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 81%CVE-2008-4397Critical
Directory traversal vulnerability in the RPC interface (asdbapi.dll) in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to execute arbitrary commands via a ..
- 80%CVE-2006-5143High
Multiple buffer overflows in CA BrightStor ARCserve Backup r11.5 SP1 and earlier, r11.1, and 9.01; BrightStor ARCserve Backup for Windows r11; BrightStor Enterprise Backup 10.5; Server Protection Suite r2; and...
- 78%CVE-2007-2139Critical
Multiple stack-based buffer overflows in the SUN RPC service in CA (formerly Computer Associates) BrightStor ARCserve Media Server, as used in BrightStor ARCserve Backup 9.01 through 11.5 SP2, BrightStor Enterprise...
- 75%CVE-2005-2668Critical
Multiple buffer overflows in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allow remote attackers to execute arbitrary code via unknown vectors.
- 72%CVE-2011-3011Medium
BaseServiceImpl.class in CA ARCserve D2D r15 does not properly handle sessions, which allows remote attackers to obtain credentials, and consequently execute arbitrary commands, via unspecified vectors.
- 71%CVE-2006-6076Critical
Buffer overflow in the Tape Engine (tapeeng.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to execute arbitrary code via certain RPC requests to TCP port...
- 67%CVE-2007-5003Critical
Multiple stack-based buffer overflows in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allow remote attackers to execute arbitrary code via a long (1) username or...
All Ca products we track.
204 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Brightstor Arcserve Backupbrightstor_arcserve_backup19 vulnerabilities10 versions
- Etrust Secure Content Manageretrust_secure_content_manager15 vulnerabilities3 versions
- Protection Suitesprotection_suites13 vulnerabilities6 versions
- Arcserve Backuparcserve_backup11 vulnerabilities12 versions
- Business Protection Suitebusiness_protection_suite11 vulnerabilities2 versions
- Etrust Antivirusetrust_antivirus8 vulnerabilities10 versions
- Etrust Intrusion Detectionetrust_intrusion_detection7 vulnerabilities7 versions
- Unicenter Managementunicenter_management6 vulnerabilities9 versions
- Anti-Virus for the Enterpriseanti-virus_for_the_enterprise5 vulnerabilities6 versions
- Unicenter Software Deliveryunicenter_software_delivery5 vulnerabilities3 versions
- Unified Infrastructure Managementunified_infrastructure_management5 vulnerabilities3 versions
- Client Automationclient_automation4 vulnerabilities7 versions
- Ehealth Performance Managerehealth_performance_manager4 vulnerabilities3 versions
- Gateway Securitygateway_security4 vulnerabilities2 versions
- Project Portfolio Managementproject_portfolio_management4 vulnerabilities15 versions
- Service Desk Managerservice_desk_manager4 vulnerabilities6 versions
- Unicenter Asset Managementunicenter_asset_management4 vulnerabilities3 versions
- Unicenter Enterprise Job Managerunicenter_enterprise_job_manager4 vulnerabilities1 version
- Unicenter Tngunicenter_tng4 vulnerabilities4 versions
- Universal Job Management Agentuniversal_job_management_agent4 vulnerabilities1 version
- Virtual Assurance for Infrastructure Managersvirtual_assurance_for_infrastructure_managers4 vulnerabilities4 versions
- Workload Automation Aeworkload_automation_ae4 vulnerabilities9 versions
- Xosoft Content Distributionxosoft_content_distribution4 vulnerabilities2 versions
- Xosoft High Availabilityxosoft_high_availability4 vulnerabilities2 versions
This directory lists the 204 Ca products with at least one tracked version, of 247 in our catalogue.
Running Ca? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 new flaw affects software Acme tracks
The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Norman Antivirus 6.06.12, eSafe 7.0.17.0, Kaspersky Anti-Virus 7.0.0.125, McAfee Gateway (formerly Webwasher) 2010.1C, Sophos Anti-Virus 4.61.0, CA eTrust Vet Antivirus 36.1.8511, Antiy Labs AVL SDK 2.0.3.7, PC Tools AntiVirus 7.0.3.5, Rising Antivirus 22.83.00.03, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a modified encoding field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ELF parser implementations.
- Matched to
- Etrust Vet Antivirus on Acme's software list
- What to do
- Plan in the vendor’s update
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 138 published vulnerabilities across 247 products and 692 versions from Ca.
None of Ca's vulnerabilities is on the list of flaws known to be exploited today.
Brightstor Arcserve Backup, with 19 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Ca products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.