BrightStor ARCserve Backup Agents Buffer Overflow Vulnerability - Secunia Advisories - Vulnerability Intelligence

BrightStor ARCserve Backup Agents Buffer Overflow Vulnerability
Secunia Advisory:	SA16316	Advisory Toolbox: Issue ticket Save in to-do list Mark as handled Exploit information Download as PDF Review actions Add comment
Release Date:	2005-08-03
Last Update:	2005-08-08
Popularity:	10,204 views

Critical:	Moderately critical
Impact:	System access
Where:	From local network
Solution Status:	Vendor Patch

Software:	BrightStor ARCserve Backup 11.x BrightStor ARCserve Backup 11.x (for Windows) BrightStor ARCserve Backup 9.x BrightStor Enterprise Backup 10.x

Subscribe:	Instant alerts on relevant vulnerabilities

CVE reference:	CVE-2005-1272

Description: A vulnerability has been reported in BrightStor ARCserve Backup, which can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused due to a boundary error in the Backup Agents and can be exploited to cause a stack-based buffer overflow by sending a specially crafted string of over 3168 bytes to port 6070. Successful exploitation allows arbitrary code execution with SYSTEM privileges. The vulnerability has been reported in several BrightStor ARCserve Backup Agents (such as Backup Agent for Microsoft SQL server and Backup Agent for Oracle) in the following product versions: * BrightStor ARCserve Backup r11.1 Windows * BrightStor ARCserve Backup 11 for Windows * BrightStor ARCserve Backup 9.01 Windows * BrightStor Enterprise Backup v10.0 for Windows * BrightStor Enterprise Backup v10.5 for Windows Solution: Apply patches. BrightStor ARCserve Backup r11.1 for Windows: http://supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO71010 BrightStor ARCserve Backup r11.0 for Windows: http://supportconnect.ca.com/sc/solce....jsp?aparno=QO70769&startsearch=1 BrightStor ARCserve Backup v9.01 for Windows: http://supportconnect.ca.com/sc/solce....jsp?aparno=QO70770&startsearch=1 BrightStor Enterprise Backup v10.5 for Windows: http://supportconnect.ca.com/sc/solce....jsp?aparno=QO70774&startsearch=1 BrightStor Enterprise Backup v10.0 for Windows: http://supportconnect.ca.com/sc/solce....jsp?aparno=QO70773&startsearch=1 Provided and/or discovered by: Discovered by anonymous person and reported via iDEFENSE. Changelog: 2005-08-04: Added link to US-CERT vulnerability note. 2005-08-08: Vendor issues new patch for BrightStor ARCserve Backup r11.1 for Windows to address vulnerability correctly. Original Advisory: iDEFENSE: http://idefense.com/application/poi/display?id=287&type=vulnerabilities Other References: US-CERT VU#279774: http://www.kb.cert.org/vuls/id/279774

Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released. Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

Latest Advisories

4th Dec, 2008

New advisories:	20
New vulnerabilities:	45
Updated advisories:	31

Not // 306 views

Linux Kernel PARISC "parisc_show_stack() " Denial of Service

Not // 265 views

IBM HMC HTTP TRACE Response Cross-Site Scripting Weakness

Moderately // 330 views

PHP ZipArchive::extractT o() Directory Traversal Vulnerability

Moderately // 258 views

RSyslog "AllowedSender" Security Bypass Vulnerability

Moderately // 349 views

Nagios Unspecified CGI Vulnerability

Highly // 296 views

RadAsm ".rap" Processing Buffer Overflow Vulnerability

Highly // 271 views

Multi SEO phpBB "pfad" File Inclusion Vulnerability

Moderately // 283 views

PowerDNS CH HINFO Denial of Service Vulnerability

Less // 278 views

Drupal Storm Module SQL Injection Vulnerabilities

Moderately // 275 views

Check Up System for Thai Healthcare "search" SQL Injection

Solutions | More...

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.