Multiple vulnerabilities in CA software

Description

Multiple serious vulnerabilities have been found in ARCserve Backup. Malicious users can exploit these vulnerabilities to execute arbitrary code or cause denial of service. Below is a complete list of vulnerabilities

1. A buffer overflow can be exploited remotely via specially designed RPC requests;
2. Vectors related to the RPC Server can be exploited remotely via a specially designed TADDR2UADDR;
3. Vectors related to the Tape Engine can be exploited remotely via a specially designed RPC call.

Original advisories

• CA bulletin

Exploitation

Public exploits exist for this vulnerability.

Related products

• BrightStor-ARCserve-Backup

CVE list

• CVE-2007-0816
  critical
• CVE-2006-6076
  critical
• CVE-2007-1448
  warning
• CVE-2007-1447
  critical

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com