[security-alerts] FW: [SA23060] CA BrightStor ARCserve Backup Buffer Overflow Vulnerability

["Kazennov, Vladimir" <Vladimir.Kazennov@xxxxxxxxxx>]

> ----------------------------------------------------------------------
> 
> TITLE:
> CA BrightStor ARCserve Backup Buffer Overflow Vulnerability
> 
> SECUNIA ADVISORY ID:
> SA23060
> 
> VERIFY ADVISORY:
> http://secunia.com/advisories/23060/
> 
> CRITICAL:
> Moderately critical
> 
> IMPACT:
> System access
> 
> WHERE:
> From local network
> 
> SOFTWARE:
> BrightStor ARCserve Backup 11.x (for Windows)
> http://secunia.com/product/3099/
> BrightStor ARCserve Backup 11.x
> http://secunia.com/product/312/
> BrightStor ARCserve Backup 11.x (for Microsoft SQL Server)
> http://secunia.com/product/8144/
> 
> DESCRIPTION:
> LSsecurity has reported a vulnerability in BrightStor ARCserver
> Backup, which potentially can be exploited by malicious people to
> compromise a vulnerable system.
> 
> The vulnerability is caused due to an improper handling of RPC
> requests within the Tape Engine service (tapeeng.exe). This can be
> exploited to cause a buffer overflow via a specially crafted packet
> sent to the service (default port 6502/TCP).
> 
> Successful exploitation may allow execution of arbitrary code.
> 
> The vulnerability is reported in version 11.5. Other versions may
> also be affected.
> 
> SOLUTION:
> The vendor is reportedly working on a solution.
> 
> PROVIDED AND/OR DISCOVERED BY:
> LSsecurity
> 
> ORIGINAL ADVISORY:
> http://lists.grok.org.uk/pipermail/full-disclosure/2006-Novemb
> er/050808.html
>