Secunia

A vulnerability has been reported in BrightStor ARCserve Backup, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to a boundary error in the Backup Agents and can be exploited to cause a stack-based buffer overflow by sending a specially crafted string of over 3168 bytes to port 6070.

Successful exploitation allows arbitrary code execution with SYSTEM privileges.

The vulnerability has been reported in several BrightStor ARCserve Backup Agents (such as Backup Agent for Microsoft SQL server and Backup Agent for Oracle) in the following product versions:
* BrightStor ARCserve Backup r11.1 Windows
* BrightStor ARCserve Backup 11 for Windows
* BrightStor ARCserve Backup 9.01 Windows
* BrightStor Enterprise Backup v10.0 for Windows
* BrightStor Enterprise Backup v10.5 for Windows

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
Discovered by anonymous person and reported via iDEFENSE.

Changelog
Further details available in Customer Area

Original Advisory
iDEFENSE:
http://idefense.com/application/poi/display?id=287&type=vulnerabilities

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area