PT-2007-1917 · Ca · Ca Desktop Management Suite+3
Publicado
2007-01-23
·
Atualizado
2021-04-08
·
CVE-2007-0449
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
CA BrightStor ARCserve Backup for Laptops and Desktops versions r11.0 through r11.1 SP1
CA Mobile Backup version r4.0
CA Desktop and Business Protection Suite version r2
CA Desktop Management Suite (DMS) versions r11.0 and r11.1
Description
The issue is related to multiple buffer overflows in LGSERVER.EXE. Remote attackers can execute arbitrary code by sending crafted packets to TCP port 1900 or 2200.
Recommendations
For CA BrightStor ARCserve Backup for Laptops and Desktops versions r11.0 through r11.1 SP1, update to a version outside of this range to resolve the issue.
For CA Mobile Backup version r4.0, update to a newer version to mitigate the risk.
For CA Desktop and Business Protection Suite version r2, update to a version that is not affected by this issue.
For CA Desktop Management Suite (DMS) versions r11.0 and r11.1, update to a version that is not within this range to resolve the issue.
Exploit
Correção
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ca Brightstor Arcserve Backup For Laptops/Desktops
Ca Desktop Management Suite
Ca Desktop/Business Protection Suite
Ca Mobile Backup