Description
The cadbd RPC service in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows remote attackers to (1) execute arbitrary code via stack-based buffer overflows in unspecified RPC procedures, and (2) trigger memory corruption related to the use of "handle" RPC arguments as pointers.
References
- 27192 third-party-advisory
- 41374 vdb-entry
- http://supportconnectw.ca.com/public/storage/infodocs/basb-secnotice.asp
- 41373 vdb-entry
- http://secunia.com/secunia_research/2007-62/advisory/
- 20071011 [CAID 35724, 35725, 35726]: CA BrightStor ARCserve Backup Multiple Vulnerabilities mailing-list
- ca-brightstor-rpc-code-execution(37070) vdb-entry
- 26015 vdb-entry
- 1018805 vdb-entry
- ADV-2007-3470 vdb-entry