PT-2007-2260 · Ca · Ca Brightstor Arcserve Backup

Shirkdog · Publicado 2007-02-07 · Atualizado 2021-04-07 · CVE-2007-0816

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: CA BrightStor ARCserve Backup versions 11.5 SP2 and earlier

Description: The issue allows remote attackers to cause a denial of service, resulting in a service crash, by sending a crafted TADDR2UADDR that triggers a null pointer dereference in catirpc.dll. This could be related to null credentials or verifier fields.

Recommendations: For CA BrightStor ARCserve Backup versions 11.5 SP2 and earlier, consider restricting access to the RPC Server service until a patch is available. As a temporary workaround, disabling the catirpc.exe service may prevent the denial of service. However, this may have implications for the functionality of the backup system. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2007-0816

Produtos afetados

Ca Brightstor Arcserve Backup

Referências · 14

• 🔥 https://exploit-db.com/exploits/3248 · Exploit
• http://frsirt.com/english/advisories/2007/0461 · Nota
• http://xforce.iss.net/xforce/xfdb/32137 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32137 · Nota
• http://osvdb.org/32989 · Nota
• http://securityfocus.com/bid/22365 · Nota
• http://secunia.com/advisories/24009 · Nota
• http://secunia.com/advisories/24512 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-0816 · Nota de Segurança
• http://vupen.com/english/advisories/2007/0461 · Nota
• http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=35058 · Nota
• http://supportconnectw.ca.com/public/storage/infodocs/babtapeng-securitynotice.asp · Nota
• http://milw0rm.com/exploits/3248 · Nota
• http://www3.ca.com/securityadvisor/newsinfo/collateral.aspx?cid=101317 · Nota