Description
The (1) server and (2) agent components in CA ARCserve Backup r12.5, r15, and r16 on Windows do not properly validate RPC requests, which allows remote attackers to cause a denial of service (service crash) via a crafted request.
References
- 20130114 Updated - CA20121018-01: Security Notice for CA ARCserve Backup mailing-list
- arcserve-backup-rpc-dos(79477) vdb-entry
- 86415 vdb-entry
- VU#408099 third-party-advisory
- 51012 third-party-advisory
- https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7BF9EEA31E-8089-423E-B746-41B5C9DD2AC1%7D
- http://packetstormsecurity.com/files/119543/Security-Notice-For-CA-ARCserve-Backup.html