Computer Associates ARCserve Backup Multiple Remote Buffer Overflow Vulnerabilities
BID:24348
Info
Computer Associates ARCserve Backup Multiple Remote Buffer Overflow Vulnerabilities
| Bugtraq ID: | 24348 |
| Class: | Unknown |
| CVE: |
CVE-2007-3216 CVE-2007-5003 CVE-2007-5004 CVE-2007-5005 CVE-2007-5006 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 06 2007 12:00AM |
| Updated: | Nov 05 2010 11:08AM |
| Credit: | The original discoverer of this issue is currently unknown; eEye Digital Security disclosed these issues. |
| Vulnerable: |
Computer Associates Protection Suites r2 0 Computer Associates Desktop Management Suite 11.2 Computer Associates Desktop Management Suite 11.1 Computer Associates ARCserve Backup for Laptops and Desktops 11.5 Computer Associates ARCserve Backup for Laptops and Desktops 11.1 SP2 Computer Associates ARCserve Backup for Laptops and Desktops 11.1 SP1 Computer Associates ARCserve Backup for Laptops and Desktops 11.1 Computer Associates ARCserve Backup for Laptops and Desktops 11.0 |
| Not Vulnerable: | |
Discussion
Computer Associates ARCserve Backup Multiple Remote Buffer Overflow Vulnerabilities
Computer Associates ARCserve Backup for Laptops & Desktops is prone to multiple remote buffer-overflow vulnerabilities because the application fails to bounds-check user-supplied input before copying it into an insufficiently sized memory buffer.
Successfully exploiting these issues allows remote attackers to execute arbitrary machine code with SYSTEM-Level privileges. This will result in a complete compromise of affected computers.
ARCserve Backup for Laptops & Desktops r11.1 is reported vulnerable.
Computer Associates ARCserve Backup for Laptops & Desktops is prone to multiple remote buffer-overflow vulnerabilities because the application fails to bounds-check user-supplied input before copying it into an insufficiently sized memory buffer.
Successfully exploiting these issues allows remote attackers to execute arbitrary machine code with SYSTEM-Level privileges. This will result in a complete compromise of affected computers.
ARCserve Backup for Laptops & Desktops r11.1 is reported vulnerable.
Exploit / POC
Computer Associates ARCserve Backup Multiple Remote Buffer Overflow Vulnerabilities
DSquare Security has developed a working commercial exploit for its D2 Exploitation Pack product.
An exploit of the issue tracked by CVE-2007-5003 is available for the Metasploit framework:
http://metasploit.com/dev/trac/browser/framework3/trunk/modules/exploits/windows/brightstor/lgserver_rxrlogin.rb?rev=5501
The following Metasploit modules are also available:
DSquare Security has developed a working commercial exploit for its D2 Exploitation Pack product.
An exploit of the issue tracked by CVE-2007-5003 is available for the Metasploit framework:
http://metasploit.com/dev/trac/browser/framework3/trunk/modules/exploits/windows/brightstor/lgserver_rxrlogin.rb?rev=5501
The following Metasploit modules are also available:
Solution / Fix
Computer Associates ARCserve Backup Multiple Remote Buffer Overflow Vulnerabilities
Solution:
The vendor released an advisory and updates to address these issues. Please see the references for more information.
Solution:
The vendor released an advisory and updates to address these issues. Please see the references for more information.
References
Computer Associates ARCserve Backup Multiple Remote Buffer Overflow Vulnerabilities
References:
References:
- EEYEB-20070604 eEye Digital Security (eEye Digital Security)
- CA ARCserve Backup for Laptops and Desktops Authentication Bypass Vulnerability (iDefense)
- CA Works On Patches For 10 Critical Bugs In Backup Software (InformationWeek)
- iDefense Security Advisory 09.20.07: CA ARCServe Backup for Laptops ([email protected])
- [CAID 35673, 35674, 35675, 35676, 35677]: CA ARCserve Backup for Laptops and Des (Computer Associates)
- EEYE: Multiple Vulnerabilities in CA ARCserve for Laptops & Desktops (eEye)
- iDefense Security Advisory 09.20.07: CA ARCserve Backup for Laptops and Desktops (iDefense)
- CA ARCserve Backup for Laptops and Desktops Homepage (Computer Associates)
- http://supportconnectw.ca.com/public/sams/lifeguard/infodocs/caarcservebld-secur (Computer Associates)
- Multiple Vulnerabilities in CA ARCserve for Laptops & Desktops (eEye Research)