M. Shirk has reported two vulnerabilities in BrightStor ARCserve Backup, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerabilities are caused due to errors within mediasvr.exe and caloggerd.exe and can be exploited to crash the mentioned processes via sending specially crafted packets.

The vulnerabilities are reported in version 11.5.2.0 SP2. Other versions may also be affected.

Solution
Apply updates.
Further details available to Secunia VIM customers

Provided and/or discovered by
M. Shirk

Changelog
Further details available to Secunia VIM customers

Original Advisory
CA:
http://supportconnectw.ca.com/public/storage/infodocs/basb-secnotice.asp
http://supportconnectw.ca.com/public/storage/infodocs/babmedservul-secnotice.asp

Shirkdog Security:
http://www.shirkdog.us/shk-006.html

milw0rm:
http://milw0rm.com/exploits/3939
http://milw0rm.com/exploits/3940

Deep Links
Links available to Secunia VIM customers