CVE-2007-1448

The Tape Engine in CA formerly Computer Associates BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to cause a denial of service disabled interface by calling an unspecified RPC function...

CVE-2007-1447

The Tape Engine in CA formerly Computer Associates BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain RPC procedure arguments, which result in memory corruption, a different vulnerability than...

Memory corruption

The Tape Engine in CA formerly Computer Associates BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain RPC procedure arguments, which result in memory corruption, a different vulnerability than...

CVE-2007-1447

CVE-2007-1447 affects CA BrightStor ARCserve Backup Tape Engine (versions 11.5 and earlier). The vulnerability arises from memory corruption caused by improper data validation when processing RPC or stub data in the Tape Engine, enabling a remote attacker to cause DoS or potentially execute arbit...

CVE-2007-1448

The CVE-2007-1448 issue affects CA BrightStor ARCserve Backup Tape Engine (and related components) prior to 11.5, where an RPC call can disable the Tape Engine interface, causing DoS. Related advisories describe additional remote-execution/DoS vectors via the Tape Engine and Portmapper, including...

CA BrightStor ARCserve Backup Tape Engine and Portmapper Multiple Vulnerabilities (QO86255)

According to its version, the installation of BrightStor ARCserve Backup on the remote host is affected by multiple buffer overflows involving the application's Tape Engine and portmapper services. An unauthenticated, remote attacker may be able to leverage these issues to crash or disable the...

CA BrightStor ARCserve - 'msgeng.exe' Remote Stack Overflow

!/usr/bin/python This one was listed in the SANS TOP 20 and I needed an exploit for analysis. I couldnt find a reliable exploit for my analysis and so came up with this. Remote exploit for the CA BrightStor msgeng.exe service stack overflow vulnerability as described in LS-20060330.pdf on...

BrightStor ARCserve Backup Tape Engine opnum 0xCF buffer overflow

Added: 02/09/2007 CVE: CVE-2007-0169 BID: 22005 OSVDB: 31327 Background The BrightStor ARCserve Backup server includes a Backup Tape Engine feature which allows use of tape drives for storage. Problem A buffer overflow in BrightStor ARCserve Backup allows remote attackers to execute arbitrary...

BrightStor ARCserve Backup Tape Engine opnum 0xCF buffer overflow

Added: 02/09/2007 CVE: CVE-2007-0169 BID: 22005 OSVDB: 31327 Background The BrightStor ARCserve Backup server includes a Backup Tape Engine feature which allows use of tape drives for storage. Problem A buffer overflow in BrightStor ARCserve Backup allows remote attackers to execute arbitrary...

Null pointer dereference

The RPC Server service catirpc.exe in CA formerly Computer Associates BrightStor ARCserve Backup 11.5 SP2 and earlier allows remote attackers to cause a denial of service service crash via a crafted TADDR2UADDR that triggers a null pointer dereference in catirpc.dll, possibly related to null...

CVE-2007-0816

The RPC Server service catirpc.exe in CA formerly Computer Associates BrightStor ARCserve Backup 11.5 SP2 and earlier allows remote attackers to cause a denial of service service crash via a crafted TADDR2UADDR that triggers a null pointer dereference in catirpc.dll, possibly related to null...

CVE-2007-0816

The RPC Server service catirpc.exe in CA formerly Computer Associates BrightStor ARCserve Backup 11.5 SP2 and earlier allows remote attackers to cause a denial of service service crash via a crafted TADDR2UADDR that triggers a null pointer dereference in catirpc.dll, possibly related to null...

CVE-2007-0816

CVE-2007-0816 affects CA BrightStor ARCserve Backup 11.5 SP2 and earlier; the RPC Server (catirpc.dll) can be remotely triggered via a crafted TADDR2UADDR to cause a null pointer dereference, leading to a denial of service. Vulnerable component: catirpc.dll in the RPC Server service; attack path ...

Computer Associates BrightStor ARCserve Backup Catirpc.EXE远程拒绝服务漏洞

Computer Associates BrightStor ARCserve Backup是一款企业级别的备份解决方案。 BrightStor AECserver Backup包含的Catirpc.exe处理TADDR2UADDR过程存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 Catirpc.exe是为BrightStor Backup产品提供末端映射和启用RPC服务的程序。CATIRPC.dll不正确处理用于与CA RPC服务器通信的TADDR2UADDR过程，可导致一个NULL指针引用而造成拒绝服务攻击。 Computer Associates BrightSto...

CA BrightStor ARCserve Backup catirpc.exe远程拒绝服务漏洞

BrightStor ARCserve Backup可为各种平台的服务器提供备份和恢复保护功能。 BrightStor ARCserve Backup的CATIRPC.EXE进程在处理畸形用户请求时存在漏洞，远程攻击者可能利用此漏洞导致进程崩溃。 BrightStor ARCserve Backup在处理CA远程过程调用服务器（CATIRPC.EXE）服务的TADDR2UADDR（0x08）请求字节时存在空指针引用。如果攻击者向111/UDP端口发送了特制报文的话，就可以触发这个漏洞，导致服务崩溃。 Computer Associates BrightStor ARCserve Back...

CA BrightStor ARCserve for Laptops and Desktops LGServer Buffer Overflow

This module exploits a stack buffer overflow in Computer Associates BrightStor ARCserve Backup for Laptops & Desktops 11.1. By sending a specially crafted request, an attacker could overflow the buffer and execute arbitrary code. This module requires Metasploit: https://metasploit.com/download...

CVE-2007-0673

LGSERVER.EXE in BrightStor ARCserve Backup for Laptops & Desktops r11.1 allows remote attackers to cause a denial of service daemon crash via a value of 0xFFFFFFFF at a certain point in an authentication negotiation packet, which results in an out-of-bounds read...

Out-of-bounds

LGSERVER.EXE in BrightStor ARCserve Backup for Laptops & Desktops r11.1 allows remote attackers to cause a denial of service daemon crash via a value of 0xFFFFFFFF at a certain point in an authentication negotiation packet, which results in an out-of-bounds read...

CVE-2007-0673

LGSERVER.EXE in BrightStor ARCserve Backup for Laptops & Desktops r11.1 allows remote attackers to cause a denial of service daemon crash via a value of 0xFFFFFFFF at a certain point in an authentication negotiation packet, which results in an out-of-bounds read...

CVE-2007-0673

CVE-2007-0673 affects BrightStor ARCserve Backup for Laptops & Desktops r11.1. LGSERVER.EXE can be remotely triggered to crash the daemon via a crafted 0xFFFFFFFF value during authentication, causing an out-of-bounds read and denial of service. This is documented with a network attack vector and ...