Computer Associates ARCserve D2D 'Axis2' Component Default Password Security Bypass Vulnerability

Bugtraq ID:	45625
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 30 2010 12:00AM
Updated:	Jan 27 2011 08:11PM
Credit:	rgod
Vulnerable:	Computer Associates ARCServe D2D r15
Not Vulnerable:

Computer Associates ARCserve D2D 'Axis2' Component Default Password Security Bypass Vulnerability

The 'Axis2' component of Computer Associates ARCserve D2D is prone to a vulnerability that allows attackers to bypass certain security restrictions.

An attacker can exploit this issue to bypass certain security restrictions and gain access to the application. Successfully exploiting this issue will allow attackers to execute arbitrary code with SYSTEM-level privileges, completely compromising the computer.

Computer Associates ARCserve D2D r15 is vulnerable. Other products from multiple vendors that embed the 'Axis2' component may also be affected.

Computer Associates ARCserve D2D 'Axis2' Component Default Password Security Bypass Vulnerability

An attacker can use readily available tools to exploit this issue.

Exploit code is available from the following URI:

http://retrogod.altervista.org/9sg_cad2d_poc.html

Computer Associates ARCserve D2D 'Axis2' Component Default Password Security Bypass Vulnerability

Solution:
Vendor updates are available. Please see the references for more information.

Computer Associates ARCserve D2D 'Axis2' Component Default Password Security Bypass Vulnerability

References:

• ARCserve D2D Homepage (Computer Associates)
  
• CA20101231-01: Security Notice for CA ARCserve D2D (Computer Associates)
  
• Computer Associates ARCserve D2D r15 Web Service Apache Axis2 World Accessible S (rgod)
  
• CA ARCserve D2D r15 Web Service Apache Axis2 World Accessible Servlet Code Exe ([email protected])