Description
LGSERVER.EXE in BrightStor ARCserve Backup for Laptops & Desktops r11.1 allows remote attackers to cause a denial of service (daemon crash) via a value of 0xFFFFFFFF at a certain point in an authentication negotiation packet, which results in an out-of-bounds read.
References
- 20070131 Remote DOS BrightStor ARCserve Backup for Laptops & Desktops mailing-list
- 22337 vdb-entry
- 32948 vdb-entry
- 2218 third-party-advisory
- http://supportconnectw.ca.com/public/sams/lifeguard/infodocs/babldimpsec-notice.asp