CA BrightStor ARCserve Backup Memory Corruption Remote Code Execution Vulnerabilities
BID:24680
Info
CA BrightStor ARCserve Backup Memory Corruption Remote Code Execution Vulnerabilities
| Bugtraq ID: | 24680 |
| Class: | Unknown |
| CVE: |
CVE-2007-5331 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 27 2007 12:00AM |
| Updated: | Dec 18 2007 08:04PM |
| Credit: | Greg Linares is credited with the discovery of this issue. |
| Vulnerable: |
Computer Associates Server Protection Suite r2 Computer Associates Business Protection Suite for Microsoft SBS Std Ed r2 Computer Associates Business Protection Suite for Microsoft SBS Pre ed r2 Computer Associates Business Protection Suite r2 Computer Associates BrightStor ARCServe Backup for Windows 11.0 Computer Associates BrightStor ARCServe Backup 11.1 Computer Associates BrightStor ARCServe Backup 9.01 Computer Associates BrightStor ARCServe Backup 11.5.SP3 Computer Associates BrightStor ARCServe Backup 11.5 Computer Associates BrightStor ARCServe Backup 10.5 |
| Not Vulnerable: | |
Discussion
CA BrightStor ARCserve Backup Memory Corruption Remote Code Execution Vulnerabilities
Computer Associates BrightStor ARCserve Backup is prone to remote code-execution vulnerabilities due to memory-corruption issues.
Successfully exploiting these issues would allow an attacker to corrupt memory and execute arbitrary code in the context of the affected application. This in turn may result in a complete compromise of affected computers.
The following applications are affected:
BrightStor ARCserve Backup v9.01, r11.1, r11.5, r11 for Windows
BrightStor Enterprise Backup r10.5
CA Server Protection Suite r2,
CA Business Protection Suite r2
CA Business Protection Suite for Microsoft Small Business Server Standard Edition r2
CA Business Protection Suite for Microsoft Small Business Server Premium Edition r2
Computer Associates BrightStor ARCserve Backup is prone to remote code-execution vulnerabilities due to memory-corruption issues.
Successfully exploiting these issues would allow an attacker to corrupt memory and execute arbitrary code in the context of the affected application. This in turn may result in a complete compromise of affected computers.
The following applications are affected:
BrightStor ARCserve Backup v9.01, r11.1, r11.5, r11 for Windows
BrightStor Enterprise Backup r10.5
CA Server Protection Suite r2,
CA Business Protection Suite r2
CA Business Protection Suite for Microsoft Small Business Server Standard Edition r2
CA Business Protection Suite for Microsoft Small Business Server Premium Edition r2
Exploit / POC
CA BrightStor ARCserve Backup Memory Corruption Remote Code Execution Vulnerabilities
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
CA BrightStor ARCserve Backup Memory Corruption Remote Code Execution Vulnerabilities
Solution:
The vendor released an advisory and updates to address these issues. Please see the references for more information.
Computer Associates BrightStor ARCServe Backup 9.01
Computer Associates BrightStor ARCServe Backup 11.5
Computer Associates BrightStor ARCServe Backup 11.1
Solution:
The vendor released an advisory and updates to address these issues. Please see the references for more information.
Computer Associates BrightStor ARCServe Backup 9.01
-
Computer Associates QO91098 Computer Associates
http://supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO91 098
Computer Associates BrightStor ARCServe Backup 11.5
-
Computer Associates QO91094 Computer Associates
http://supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO91 094
Computer Associates BrightStor ARCServe Backup 11.1
-
Computer Associates QO91097 Computer Associates
http://supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO91 097
References
CA BrightStor ARCserve Backup Memory Corruption Remote Code Execution Vulnerabilities
References:
References:
- BrightStor ARCserve Backup Product Page (Computer Associates)
- BrightStor ARCserve Backup Security Notice (Computer Associates)
- [CAID 35724, 35725, 35726]: CA BrightStor ARCserve Backup Multiple Vulnerabiliti ("Williams, James K"
) - EEYE: CA BrightStor ArcServe Backup Server Arbitrary Pointer Dereference ("eEye Advisories"
) - Updated - [CAID 35724, 35725, 35726]: CA BrightStor ARCserve Backup Multiple Vul ("Williams, James K"
) - CA BrightStor ARCserve Backup Server Arbitrary Pointer Dereference (eEye Digital Security)
- EEYEB-20070618 (eEye Research)