OSVDB ID: 35326

Title: CA BrightStor ARCserve Backup Media Server SUN RPC Service Remote Overflows

Info

Disclosure

Apr 24, 2007

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Apr 24, 2007

Description

A buffer overflow exists in ARCserve Backup. The Media Server fails to validate SUN RPC requests resulting in a stack overflow. With a specially crafted request, a remote attacker can cause arbitrary code execution resulting in a loss of integrity.

Classification

Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Solution: Patch / RCS
Exploit: Exploit Public, Exploit Private, Exploit Commercial
Disclosure: Vendor Verified, Vendor Verified, Coordinated Disclosure

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, CA has released a patch to address this vulnerability.

Products

CA	ARCserve Backup	11
		11.5
		11.1
		9.01
	BrightStor Enterprise Backup	10.5
	Server Protection Suite	r2
	Business Protection Suite	r2

References

Security Tracker: 1017952
CVE ID: 2007-2139 (see also: NVD)
Bugtraq ID: 23635
Secunia Advisory ID: 24972
ISS X-Force ID: 33854
Metasploit ID: 35326
CERT VU: 979825
VUPEN Advisory: ADV-2007-1529
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2007-04/0422.html
http://archives.neohapsis.com/archives/bugtraq/2007-04/0456.html
Generic Exploit URL: http://immunitysec.com
http://www.saintcorporation.com/cgi-bin/exploit_info/brightstor_arcserve_mediasvr_sunrpc
Vendor Specific News/Changelog Entry: http://supportconnectw.ca.com/public/storage/infodocs/babmedser-secnotice.asp
Other Advisory URL: http://www.zerodayinitiative.com/advisories/ZDI-07-022.html

Credit

Tenable Network Security -

Direct URL: http://osvdb.org/35326

Info

Disclosure

Discovery

Dates

Exploit

Solution

Description

Classification

Solution

Products

CA

ARCserve Backup

BrightStor Enterprise Backup

Server Protection Suite

Business Protection Suite

References

Credit