M. Shirk has discovered a vulnerability in BrightStor ARCserve Backup, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to a NULL pointer dereference error when handling TADDR2UADDR (0x08) request types within the CA Remote Procedure Call Server service (CATIRPC.EXE). This can be exploited to crash the service by sending a specially crafted packet to port 111/UDP.

The vulnerability is confirmed in version r11.5 SP2. Other versions may also be affected.

Solution
Apply patches. Please see the vendor's advisory for details.

Provided and/or discovered by
M. Shirk

Changelog
Further details available in Customer Area

Original Advisory
http://milw0rm.com/exploits/3248

CA:
http://www3.ca.com/securityadvisor/newsinfo/collateral.aspx?cid=101317

Deep Links
Links available in Customer Area