BrightStor ARCserve Media Server SUN RPC buffer overflow

2007-05-03T00:00:00
ID SAINT:9F0740B5054C7416B725D85701486C26
Type saint
Reporter SAINT Corporation
Modified 2007-05-03T00:00:00

Description

Added: 05/03/2007
CVE: CVE-2007-2139
BID: 23635
OSVDB: 34127

Background

CA ARCserve Backup (formerly BrightStor ARCserve Backup) is a backup and recovery solution. ARCserve Media Server is a component which comes with ARCserve Backup.

Problem

ARCserve Media Server is affected by multiple buffer overflow vulnerabilities which allow remote attackers to execute arbitrary commands by sending specially crafted requests to the SUN RPC service.

Resolution

Apply one of the patches referenced in the CA Security Notice.

References

<http://www.kb.cert.org/vuls/id/979825>
<http://www.zerodayinitiative.com/advisories/ZDI-07-022.html>

Limitations

Exploit works on BrightStor ARCserve Backup r11.5 SP2.

Platforms

Windows 2000
Windows Server 2003