Vulnerability ID:
34957
Discovered By:
Anonymous
Exploitable Locally:
No
Exploitable Remotely:
Yes
Impact:
A remote attacker can execute arbitrary code.
Root Cause:
Software Vulnerability
Description
CA BrightStor ARCserve Backup contains a vulnerability that can allow a remote attacker to execute arbitrary code. The vulnerability is due to a flaw in handling of RPC requests to the Tape Engine service. An attacker can place certain data in opnum 0xBF in an RPC request to execute arbitrary code.
Back to top
Affected Technologies
Computer Associates: BrightStor ARCserve Backup v9.01 Client Agent for Windows
Computer Associates: CA BrightStor ARCserve Backup for Windows r11
Computer Associates: CA BrightStor ARCserve Backup for Windows r11.1
Computer Associates: CA BrightStor ARCserve Backup for Windows r11.5
Computer Associates: CA Brightstor Enterprise Backup v10.5 for Windows
Computer Associates: CA Protection Suites - Protection Suite Server r2 x86 32
Back to top