Description
The Tape Engine in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain RPC procedure arguments, which result in memory corruption, a different vulnerability than CVE-2006-6076.
References
- 1017783 vdb-entry
- ADV-2007-0971 vdb-entry
- brightstor-rpc-tapeengine-code-execution(33017) vdb-entry
- 24512 third-party-advisory
- VU#375353 third-party-advisory
- 22994 vdb-entry
- http://www3.ca.com/securityadvisor/newsinfo/collateral.aspx?cid=101317
- 32990 vdb-entry
- http://supportconnectw.ca.com/public/storage/infodocs/babtapeng-securitynotice.asp