Description
Multiple buffer overflows in xdr functions in the server in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allow remote attackers to execute arbitrary code, as demonstrated by a stack-based buffer overflow via a long parameter to the xdr_rwsstring function.
References
- http://www.zerodayinitiative.com/advisories/ZDI-08-026/
- 29283 vdb-entry
- 30300 third-party-advisory
- https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=176798
- 20080519 ZDI-08-026: CA BrightStor ARCserve Backup Remote Buffer Overflow mailing-list
- ADV-2008-1573 vdb-entry
- 1020044 vdb-entry
- ca-arcservebackup-xdrrwsstring-bo(42527) vdb-entry
- 20080519 CA ARCserve Backup caloggerd and xdr Functions Vulnerabilities mailing-list