Description
Buffer overflow in the UniversalAgent for Computer Associates (CA) BrightStor ARCserve Backup allows remote authenticated users to cause a denial of service or execute arbitrary code via an agent request to TCP port 6050 with a large argument before the option field.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Metasploit 1 module
-
CA BrightStor Universal Agent Overflow
exploit/windows/brightstor/universal_agent
Exploit-DB 1
- CA BrightStor Universal Agent - Remote Overflow (Metasploit) EDB-16405 · remote · Jun 22, 2010 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 20050414 Computer Associates BrightStor ARCserve Backup and BrightStor Enterprise Backup UniversalAgent buffer overflow vulnerability mailing-list
- 13102 vdb-entry
- 20050217 RE: BrightStor ARCserve Backup buffer overflow PoC (fixes available) mailing-list
- 20050411 Computer Associates BrightStor ARCserve Backup UniversalAgent Buffer Overflow third-party-advisory