Description
The LDBserver service in the server in CA ARCserve Backup 11.1 through 12.0 on Windows allows remote attackers to execute arbitrary code via a handle_t argument to an RPC endpoint in which the argument refers to an incompatible procedure.
References
- 20081211 Secunia Research: CA ARCserve Backup RPC "handle_t" Argument Vulnerability mailing-list
- http://secunia.com/secunia_research/2007-82/
- 27299 third-party-advisory
- 4708 third-party-advisory
- ADV-2008-3404 vdb-entry
- 50683 vdb-entry
- 32764 vdb-entry
- 20081210 CA ARCserve Backup LDBserver Vulnerability mailing-list
- https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=194293
- http://community.ca.com/blogs/casecurityresponseblog/archive/2008/12/10.aspx