[CAID 35198, 35276]: CA BrightStor ARCserve Backup Media Server Vulnerabilities

Title: CAID 35198, 35276: CA BrightStor ARCserve Backup Media Server Vulnerabilities CA Vuln ID CAID: 35198, 35276 CA Advisory Date: 2007-04-24 Reported By: ZDI Impact: Remote attackers can cause a denial of service or potentially execute arbitrary code. Summary: CA BrightStor ARCserve Backup Med...

CA BrightStor ARCserve Backup Media Server组件多个远程栈溢出漏洞

BrightStor ARCserve Backup可为各种平台的服务器提供备份和恢复保护功能。 BrightStor ARCserve Backup的Media Server组件中绑定在随机高TCP端口上的SUN RPC服务存在栈溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 如果向该服务发送了特制的RPC字符串的话，就可能触发这个溢出，导致拒绝服务或执行任意指令。 Computer Associates BrightStor ARCserve Backup r11.5 SP2 Computer Associates BrightStor ARCserve Backup R11.5...

Immunity Canvas: BRIGHTSTOR_MEDIA

Name| brightstormedia ---|--- CVE| CVE-2007-2139 Exploit Pack| CANVAS Description| CA BrightStor ARCserve Backup Media Server RPC Interface Overflow Notes| CVE Name: CVE-2007-2139 VENDOR: Computer Associates VersionsAffected: Repeatability: References:...

CVE-2007-2139

Multiple stack-based buffer overflows in the SUN RPC service in CA formerly Computer Associates BrightStor ARCserve Media Server, as used in BrightStor ARCserve Backup 9.01 through 11.5 SP2, BrightStor Enterprise Backup 10.5, Server Protection Suite 2, and Business Protection Suite 2, allow remot...

CVE-2007-2139

Multiple stack-based buffer overflows in the SUN RPC service in CA formerly Computer Associates BrightStor ARCserve Media Server, as used in BrightStor ARCserve Backup 9.01 through 11.5 SP2, BrightStor Enterprise Backup 10.5, Server Protection Suite 2, and Business Protection Suite 2, allow remot...

CVE-2007-2139

CVE-2007-2139 is a real vulnerability affecting CA BrightStor ARCserve Media Server (and related BrightStor ARCserve Backup/Enterprise components). Connected sources describe a stack-based buffer overflow in the MediaSrv SUN RPC handling caused by insufficient boundary checks when processing craf...

CA BrightStor ARCserve Backup Media Server RPC service buffer overflows

Overview The CA BrightStor ARCserve Backup Media Server contains multiple buffer overflows in the RPC service, which can allow a remote, unauthenticated attacker to execute arbitrary code with elevated privileges. Description BrightStor ARCserve Backup is a backup and data retention tool that...

Computer Associates BrightStor ARCserve Backup MediaSVR.EXE 191缓冲区溢出漏洞

Computer Associates BrightStor ARCserve Backup是一款企业级的备份解决方案。 Computer Associates BrightStor ARCserve Backup处理XDR过程的RPC数据存在设计错误，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 Mediasvr.exe导入的多个DLL在处理使用XDR过程的RPC数据时存在设计错误。4个来自RPC报文的字节作为特殊地址处理（xdrhandlet data会经过多次位移动和字节反转），最后装载到ECX中，在NULL字节后至少8字节NULL的191 0xbf过程成为可利用条件：...

CA Brightstor ARCserve Backup fails to properly process RPC requests

Overview The Computer Associates BrightStor ARCserve Backup contains a buffer overflow in the handling of RPC data that may allow a remote attacker to execute arbitrary code. Description BrightStor ARCserve Backup is a backup and data retention tool that integrates with other BrightStor Data...

CA BrightStor ARCserve Backup Mediasvr.exe vulnerability

CA is aware that functional exploit code was publicized on March 30, 2007 for a CA BrightStor ARCserve Backup Mediasvr.exe vulnerability. We have verified that a high risk vulnerability does exist and we are now working on a patch to address the issue. CA recommends that BrightStor ARCserve Backu...

Brightstor ArcServe Backup buffer overflow

Buffer overflowы in backup discovery service and tape engine, backup message system...

Cross site request forgery (csrf)

The RPC service in mediasvr.exe in CA BrightStor ARCserve Backup 11.5 SP2 build 4237 allows remote attackers to execute arbitrary code via crafted xdrhandlet data in RPC packets, which is used in calculating an address for a function call, as demonstrated using the 191 0xbf RPC request...

CVE-2007-1785

The RPC service in mediasvr.exe in CA BrightStor ARCserve Backup 11.5 SP2 build 4237 allows remote attackers to execute arbitrary code via crafted xdrhandlet data in RPC packets, which is used in calculating an address for a function call, as demonstrated using the 191 0xbf RPC request...

CVE-2007-1785

The RPC service in mediasvr.exe in CA BrightStor ARCserve Backup 11.5 SP2 build 4237 allows remote attackers to execute arbitrary code via crafted xdrhandlet data in RPC packets, which is used in calculating an address for a function call, as demonstrated using the 191 0xbf RPC request...

CVE-2007-1785

CVE-2007-1785 is a remote code execution vulnerability in CA BrightStor ARCserve Backup Media Server (mediasvr.exe) caused by improper handling of RPC SUN RPC requests (xdr_handle_t) in the Mediasvr service. It affects BrightStor ARCserve Backup Media Server components across multiple versions (n...

KLA10093 Multiple vulnerabilities in CA software

Multiple serious vulnerabilities have been found in ARCserve Backup. Malicious users can exploit these vulnerabilities to execute arbitrary code or cause denial of service. Below is a complete list of vulnerabilities 1. A buffer overflow can be exploited remotely via specially designed RPC...

ARCserve msgeng.exe buffer overflow exploit (win2k SP4)

Hi, I have attached an exploit for CA ARCserve msgeng.exe buffer overflow exploit as described in LS-20060330.pdf. This was tested on windows 2000 server SP4 in a vmware environment. Cheers, Looking for earth-friendly autos? Browse Top Cars by "Green Rating" at Yahoo! Autos' Green Center...

[CAID 34817, 35058, 35158, 35159]: CA BrightStor ARCserve Backup Tape Engine and Portmapper Vulnerabilities

Title: CAID 34817, 35058, 35158, 35159: CA BrightStor ARCserve Backup Tape Engine and Portmapper Vulnerabilities CA Vuln ID CAID: 34817, 35058, 35158, 35159 CA Advisory Date: 2007-03-15 Reported By: McAfee Impact: Remote attackers can cause a denial of service or potentially execute arbitrary cod...

ARCserve msgeng.exe buffer overflow exploit (win2k SP4)

Hi, I have attached an exploit for CA ARCserve msgeng.exe buffer overflow exploit as described in LS-20060330.pdf. This was tested on windows 2000 server SP4 in a vmware environment. Cheers, Looking for earth-friendly autos? Browse Top Cars by "Green Rating" at Yahoo! Autos' Green Center...

CA BrightStor ARCserve (msgeng.exe) Remote Stack Overflow Exploit

No description provided by source. !/usr/bin/python This one was listed in the SANS TOP 20 and I needed an exploit for analysis. I couldnt find a reliable exploit for my analysis and so came up with this. Remote exploit for the CA BrightStor msgeng.exe service stack overflow vulnerability as...