Computer Associates BrightStor ARCserve Backup Tape Engine Remote Buffer Overflow Vulnerability
BID:21221
Info
Computer Associates BrightStor ARCserve Backup Tape Engine Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 21221 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2006-6076 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 21 2006 12:00AM |
| Updated: | Mar 16 2007 03:34PM |
| Credit: | LSsecurity discovered this issue. |
| Vulnerable: |
Computer Associates Server Protection Suite r2 Computer Associates Protection Suites r2 0 Computer Associates Business Protection Suite for Microsoft SBS Std Ed r2 Computer Associates Business Protection Suite for Microsoft SBS Pre ed r2 Computer Associates Business Protection Suite 0 Computer Associates BrightStor Enterprise Backup 10.5 Computer Associates BrightStor ARCserve Backup for Windows (All) 11.5 Computer Associates BrightStor ARCServe Backup 11.5 Computer Associates BrightStor ARCServe Backup 11.1 Computer Associates BrightStor ARCServe Backup 9.01 Computer Associates BrightStor ARCServe Backup 11.5 |
| Not Vulnerable: |
Computer Associates BrightStor ARCServe Backup 11.5.SP2 |
Discussion
Computer Associates BrightStor ARCserve Backup Tape Engine Remote Buffer Overflow Vulnerability
Computer Associates BrightStor ARCserve Backup is affected by a remote buffer-overflow vulnerability because the application fails to perform proper bounds-checking on data supplied to the application.
A remote attacker may exploit this issue to execute arbitrary code on a vulnerable computer with SYSTEM privileges. Failed exploit attempts may cause denial-of-service conditions.
BrightStore ARCserver Backup 11.5 is vulnerable to this issue; other versions may also be affected.
Computer Associates BrightStor ARCserve Backup is affected by a remote buffer-overflow vulnerability because the application fails to perform proper bounds-checking on data supplied to the application.
A remote attacker may exploit this issue to execute arbitrary code on a vulnerable computer with SYSTEM privileges. Failed exploit attempts may cause denial-of-service conditions.
BrightStore ARCserver Backup 11.5 is vulnerable to this issue; other versions may also be affected.
Exploit / POC
Computer Associates BrightStor ARCserve Backup Tape Engine Remote Buffer Overflow Vulnerability
An exploit is available for members of the Immunity Partner's program:
https://www.immunityinc.com/downloads/immpartners/ca_bab.tar
The following exploit code is available:
An exploit is available for members of the Immunity Partner's program:
https://www.immunityinc.com/downloads/immpartners/ca_bab.tar
The following exploit code is available:
Solution / Fix
Computer Associates BrightStor ARCserve Backup Tape Engine Remote Buffer Overflow Vulnerability
Solution:
The vendor released advisories and fixes to address this issue. Please see the references for more information.
Computer Associates BrightStor ARCServe Backup 9.01
Computer Associates BrightStor Enterprise Backup 10.5
Solution:
The vendor released advisories and fixes to address this issue. Please see the references for more information.
Computer Associates BrightStor ARCServe Backup 9.01
-
Computer Associates QO84985
https://supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO8 4985
Computer Associates BrightStor Enterprise Backup 10.5
-
Computer Associates QO84986
https://supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO8 4986
References
Computer Associates BrightStor ARCserve Backup Tape Engine Remote Buffer Overflow Vulnerability
References:
References:
- BrightStor ARCserve Backup Product Page (Computer Associates)
- CA BrightStor ARCserve Backup Tape Engine and Portmapper Vulnerabilities (Computer Associates)
- Important Security Notice for BrightStor ARCserve Backup (Computer Associates)
- [CAID 34955, 34956, 34957, 34958, 34959, 34817]: CA BrightStor ARCserve Backup M (Computer Associates)
- CA BrightStor ARCserve Backup Tape Engine Exploit Security Notice ([email protected])
- LS-20061113 - CA BrightStor ARCserve Backup Remote Buffer Overflow Vulnerability ([email protected])
- Re: LS-20061113 - CA BrightStor ARCserve Backup Remote Buffer Overflow Vulnerabi ("Williams, James K"
- 34817 - CA BrightStor ARCserve Backup tape engine buffer overflow vulnerability (Computer Associates)