Luigi Auriemma has reported some vulnerabilities in Double-Take for Windows, which can be exploited by malicious people to disclose system information and cause a DoS (Denial of Service)

1) Errors in the Double-Take service can be exploited to e.g. cause the service to crash or consume large amounts of CPU resources by sending specially crafted packets to the service.

2) It is possible to disclose certain system information e.g. OS, program path, ethernet adapters, partitions and file system type, printer driver, and latest log entries by sending specially crafted packets to the service.

The vulnerabilities are reported in version 5.0.0.2865 and in all versions of the 4.5 branch. Other versions may also be affected.

Solution
Use in a trusted network environment only.

Provided and/or discovered by
Luigi Auriemma

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://aluigi.altervista.org/adv/doubletakedown-adv.txt

Deep Links
Links available to Secunia VIM customers