Computer Associates BrightStor ARCserve Backup MediaSVR.EXE 191 Buffer Overflow Vulnerability
BID:23209
Info
Computer Associates BrightStor ARCserve Backup MediaSVR.EXE 191 Buffer Overflow Vulnerability
| Bugtraq ID: | 23209 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2007-1785 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 30 2007 12:00AM |
| Updated: | Nov 15 2007 12:38AM |
| Credit: | M. Shirk is credited with the discovery of this vulnerability. |
| Vulnerable: |
Computer Associates Server Protection Suite r2 Computer Associates Business Protection Suite for Microsoft SBS Std Ed r2 Computer Associates Business Protection Suite for Microsoft SBS Pre ed r2 Computer Associates Business Protection Suite 2.0 Computer Associates BrightStor Enterprise Backup 10.5 Computer Associates BrightStor ARCServe Backup for Windows 11.0 Computer Associates BrightStor ARCServe Backup 11.5 Computer Associates BrightStor ARCServe Backup 11.1 Computer Associates BrightStor ARCServe Backup 9.01 Computer Associates BrightStor ARCServe Backup 11.5.SP2 Computer Associates BrightStor ARCServe Backup 11.5.SP1 Computer Associates BrightStor ARCServe Backup 11.5 Computer Associates BrightStor ARCServe Backup 11.5 |
| Not Vulnerable: | |
Discussion
Computer Associates BrightStor ARCserve Backup MediaSVR.EXE 191 Buffer Overflow Vulnerability
Computer Associates BrightStor ARCserve Backup is affected by a remote buffer-overflow vulnerability because the application fails to perform proper bounds-checking on data supplied to the application.
A remote attacker may exploit this issue to execute arbitrary code on a vulnerable computer with SYSTEM privileges. Failed exploit attempts may cause denial-of-service conditions.
Computer Associates BrightStor ARCserve Backup is affected by a remote buffer-overflow vulnerability because the application fails to perform proper bounds-checking on data supplied to the application.
A remote attacker may exploit this issue to execute arbitrary code on a vulnerable computer with SYSTEM privileges. Failed exploit attempts may cause denial-of-service conditions.
Exploit / POC
Computer Associates BrightStor ARCserve Backup MediaSVR.EXE 191 Buffer Overflow Vulnerability
UPDATE: Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
The following exploit is available:
UPDATE: Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
The following exploit is available:
Solution / Fix
Computer Associates BrightStor ARCserve Backup MediaSVR.EXE 191 Buffer Overflow Vulnerability
Solution:
The vendor released patches to address this issue. Please see the references for more information.
Computer Associates BrightStor ARCServe Backup 11.5.SP1
Computer Associates BrightStor ARCServe Backup 9.01
Computer Associates BrightStor ARCServe Backup 11.5.SP2
Computer Associates BrightStor ARCServe Backup 11.1
Solution:
The vendor released patches to address this issue. Please see the references for more information.
Computer Associates BrightStor ARCServe Backup 11.5.SP1
-
Computer Associates QO87570
http://supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO87 570
Computer Associates BrightStor ARCServe Backup 9.01
-
Computer Associates QO87574
http://supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO87 574
Computer Associates BrightStor ARCServe Backup 11.5.SP2
-
Computer Associates QO87569
http://supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO87 569
Computer Associates BrightStor ARCServe Backup 11.1
-
Computer Associates QO87573
http://supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO87 573
References
Computer Associates BrightStor ARCserve Backup MediaSVR.EXE 191 Buffer Overflow Vulnerability
References:
References:
- BrightStor ARCserve Backup Media Server Security Notice (Computer Associates)
- BrightStor ARCserve Backup Product Page (Computer Associates)
- Computer Associates (CA) Brightstor Backup Mediasvr.exe Remote Code Vulnerabilit (Shirkdog)
- [CAID 35198, 35276]: CA BrightStor ARCserve Backup Media Server Vulnerabilities (Computer Associates)
- CA BrightStor ARCserve Backup Mediasvr.exe vulnerability (James K Williams)
- CA Brightstor Backup Mediasvr.exe Remote Code Vulnerability ("M. Shirk"
- Vulnerability Note VU#151305 CA Brightstor ARCserve Backup fails to properly pro (US-CERT)