OSVDB ID: 14011

Title: Arkeia Backup Client Type 77 Request Processing Buffer Remote Overflow

Info

Disclosure
Feb 18, 2005

Discovery
Unknown

Dates

Exploit
Feb 18, 2005

Solution
Unknown

Description

 A remote overflow exists in Arkeia Backup Client. The application fails to perform proper bounds checking when processing packets marked as 'type 77' resulting in a buffer overflow. With a specially crafted type 77 request to port 617 (tcp), a remote attacker can cause arbitrary code execution resulting in a loss of integrity.

Classification

 Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Solution: Upgrade
Exploit: Exploit Public, Exploit Commercial
Disclosure: OSVDB Verified

Solution

 Upgrade to version 5.1.21, 5.2.28, 5.3.5 or higher, as it has been reported to fix this vulnerability. It is also possible to correct the flaw by implementing the following workaround: Restrict access to the service.

Products

Arkeia Corp.

Arkeia Network Backup

 5.3.3
5.2.27
4.2.x

References

Credit
  • John Doe - guldens111hotmail.com -


Direct URL: http://osvdb.org/14011