Computer Associates ARCserve Backup Remote Code Execution and Denial of Service Vulnerabilities
BID:56116
Info
Computer Associates ARCserve Backup Remote Code Execution and Denial of Service Vulnerabilities
| Bugtraq ID: | 56116 |
| Class: | Unknown |
| CVE: |
CVE-2012-2971 CVE-2012-2972 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 18 2012 12:00AM |
| Updated: | Jan 15 2013 11:40AM |
| Credit: | Computer Associates and Matteo Memelli of Offensive Security. |
| Vulnerable: |
Computer Associates ARCserve Backup r16 SP1 Computer Associates ARCserve Backup R16 Computer Associates ARCserve Backup r15 |
| Not Vulnerable: | |
Discussion
Computer Associates ARCserve Backup Remote Code Execution and Denial of Service Vulnerabilities
Computer Associates ARCserve Backup is prone to a remote code-execution vulnerability and a denial-of-service vulnerability.
Successfully exploiting these issues allow a remote attacker to execute arbitrary code with SYSTEM privileges or cause denial-of-service conditions, resulting in a complete compromise of the affected computer; other attacks are also possible.
The following products are vulnerable:
ARCserve Backup for Windows r12.5
ARCserve Backup for Windows r15
ARCserve Backup for Windows r16
ARCserve Backup for Windows r16 SP1
Computer Associates ARCserve Backup is prone to a remote code-execution vulnerability and a denial-of-service vulnerability.
Successfully exploiting these issues allow a remote attacker to execute arbitrary code with SYSTEM privileges or cause denial-of-service conditions, resulting in a complete compromise of the affected computer; other attacks are also possible.
The following products are vulnerable:
ARCserve Backup for Windows r12.5
ARCserve Backup for Windows r15
ARCserve Backup for Windows r16
ARCserve Backup for Windows r16 SP1
Exploit / POC
Computer Associates ARCserve Backup Remote Code Execution and Denial of Service Vulnerabilities
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Computer Associates ARCserve Backup Remote Code Execution and Denial of Service Vulnerabilities
Solution:
Vendor updates are available. Please contact the vendor for more information.
Solution:
Vendor updates are available. Please contact the vendor for more information.
References
Computer Associates ARCserve Backup Remote Code Execution and Denial of Service Vulnerabilities
References:
References:
- Computer Associates Homepage (Computer Associates)