Description
Queue.dll for the message queuing service (LQserver.exe) in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows remote attackers to execute arbitrary code via a malformed ONRPC protocol request for operation 0x76, which causes ARCserve Backup to dereference arbitrary pointers.
References
- 27192 third-party-advisory
- http://supportconnectw.ca.com/public/storage/infodocs/basb-secnotice.asp
- 24680 vdb-entry
- 20071011 EEYE: CA BrightStor ArcServe Backup Server Arbitrary Pointer Dereference mailing-list
- 20071011 [CAID 35724, 35725, 35726]: CA BrightStor ARCserve Backup Multiple Vulnerabilities mailing-list
- AD20071011 third-party-advisory
- ca-brightstor-lqserver-code-execution(37071) vdb-entry
- 1018805 vdb-entry
- 41371 vdb-entry
- ADV-2007-3470 vdb-entry