Description
The RPC Server service (catirpc.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 SP2 and earlier allows remote attackers to cause a denial of service (service crash) via a crafted TADDR2UADDR that triggers a null pointer dereference in catirpc.dll, possibly related to null credentials or verifier fields.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- CA BrightStor ARCserve 11.5.2.0 - 'catirpc.dll' RPC Server Denial of Service EDB-3248 · dos · Feb 1, 2007 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 24512 third-party-advisory
- 32989 vdb-entry
- ADV-2007-0461 vdb-entry
- brightstor-catirpc-dos(32137) vdb-entry
- 22365 vdb-entry
- http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=35058
- 3248 exploit
- http://www3.ca.com/securityadvisor/newsinfo/collateral.aspx?cid=101317
- 24009 third-party-advisory
- http://supportconnectw.ca.com/public/storage/infodocs/babtapeng-securitynotice.asp