OSVDB ID: 31317

Title: CA BrightStor ARCserve Backup Tape Engine (tapeeng.exe) Multiple RPC Overflow

Info

Disclosure

Dec 08, 2006

Discovery

Unknown

Dates

Exploit

Jan 05, 2007

Solution

Unknown

Description

Classification

Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Public

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, Computer Associates has released a patch (SP2) to address this vulnerability.

Products

Unknown or Incomplete

References

Keyword: 62b93df0-8b02-11ce-876c-00805f842837
CVE ID: 2006-6917 (see also: NVD)
Milw0rm: 3086
Exploit Database: 3086
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-12/0148.html
http://archives.neohapsis.com/archives/bugtraq/2006-12/0149.html
http://archives.neohapsis.com/archives/bugtraq/2006-12/0188.html
http://archives.neohapsis.com/archives/bugtraq/2006-12/0191.html
http://archives.neohapsis.com/archives/bugtraq/2007-01/0325.html
http://whitestar.linuxbox.org/pipermail/exploits/2007-January/000087.html
Other Advisory URL: http://www.lssec.com/advisories/LS-20060908.pdf
http://www.lssec.com/advisories/LS-20061001.pdf
http://www.lssec.com/advisories/LS-20061002.pdf

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/31317