PT-2007-2127 · Ca · Ca Brightstor Arcserve Backup For Laptops/Desktops

Publicado 2007-02-03 · Atualizado 2021-04-08 · CVE-2007-0673

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions BrightStor ARCserve Backup for Laptops & Desktops version r11.1

Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash. This occurs when a value of 0xFFFFFFFF is sent at a certain point in an authentication negotiation packet, leading to an out-of-bounds read.

Recommendations For BrightStor ARCserve Backup for Laptops & Desktops version r11.1, consider restricting access to the authentication negotiation packet to minimize the risk of exploitation until a patch is available.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2007-0673

Produtos afetados

Ca Brightstor Arcserve Backup For Laptops/Desktops

Referências · 6

• http://securityfocus.com/archive/1/458650/100/0/threaded · Nota
• http://supportconnectw.ca.com/public/sams/lifeguard/infodocs/babldimpsec-notice.asp · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2007-0673 · Nota de Segurança
• http://osvdb.org/32948 · Nota
• http://securityreason.com/securityalert/2218 · Nota
• http://securityfocus.com/bid/22337 · Correção