Description
Stack-based buffer overflow in CA BrightStor ARCserve Backup R11.5 client and server allows remote attackers to execute arbitrary code via long messages to the CheyenneDS Mailslot.
References
- ca-brightstor-discovery-mailslot-bo(29365) vdb-entry
- http://www.tippingpoint.com/security/advisories/TSRT-06-12.html
- 20364 vdb-entry
- http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34694
- 20061005 TSRT-06-12: CA BrightStor Discovery Service Mailslot Buffer Overflow Vulnerability mailing-list
- ADV-2006-3930 vdb-entry
- http://www3.ca.com/securityadvisor/blogs/posting.aspx?pid=93775&id=90744
- http://www3.ca.com/securityadvisor/blogs/posting.aspx?pid=94397&id=90744
- 22283 third-party-advisory
- http://supportconnectw.ca.com/public/storage/infodocs/basbr-secnotice.asp
- 20061006 [CAID 34693, 34694]: CA BrightStor ARCserve Backup Multiple Buffer Overflow Vulnerabilities mailing-list