CA BrightStor ARCserve - 'msgeng.exe' Remote Heap Overflow (1)

!/usr/bin/python I couldnt find a reliable exploit for my analysis and so came up with this. Remote exploit for the CA BrightStor msgeng.exe service heap overflow vulnerability as described in LS-20060313.pdf on lssec.com. The exploit was tested on windows 2000 SP0. Opens a shell on TCP port 4444...

[CAID 34818]: CA Personal Firewall Multiple Privilege Escalation Vulnerabilities

Title: CAID 34818: CA Personal Firewall Multiple Privilege Escalation Vulnerabilities CA Vuln ID CAID: 34818 CA Advisory Date: 2007-01-22 Discovered By: Reverse Mode Impact: Local attacker can gain escalated privileges. Summary: Multiple vulnerabilities have been discovered in CA Personal Firewal...

[Full-disclosure] [CAID 34993]: CA BrightStor ARCserve Backup for Laptops and Desktops Multiple Overflow Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: CAID 34993: CA BrightStor ARCserve Backup for Laptops and Desktops Multiple Overflow Vulnerabilities CA Vuln ID CAID: 34993 CA Advisory Date: 2007-01-23 Discovered By: Next Generation Security Software Impact: Remote attacker can cause a denial...

Buffer overflow

Multiple buffer overflows in LGSERVER.EXE in CA BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.1 SP1, Mobile Backup r4.0, Desktop and Business Protection Suite r2, and Desktop Management Suite DMS r11.0 and r11.1 allow remote attackers to execute arbitrary code via crafted...

CVE-2007-0449

Multiple buffer overflows in LGSERVER.EXE in CA BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.1 SP1, Mobile Backup r4.0, Desktop and Business Protection Suite r2, and Desktop Management Suite DMS r11.0 and r11.1 allow remote attackers to execute arbitrary code via crafted...

CVE-2007-0449

Multiple buffer overflows in LGSERVER.EXE in CA BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.1 SP1, Mobile Backup r4.0, Desktop and Business Protection Suite r2, and Desktop Management Suite DMS r11.0 and r11.1 allow remote attackers to execute arbitrary code via crafted...

CVE-2007-0449

CVE-2007-0449 pertains to a stack/heap buffer overflow in LGSERVER.EXE of CA BrightStor ARCserve Backup products. A remote, unauthenticated attacker could send crafted packets to 1900/tcp or 2200/tcp to trigger arbitrary code execution (often with SYSTEM privileges) or cause a DoS. Affected produ...

CVE-2007-0449: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in LGSERVER.EXE in CA BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.1 SP1, Mobile Backup r4.0, Desktop and Business Protection Suite r2, and Desktop Management Suite DMS r11.0 and r11.1 allow remote attackers to execute arbitrary code via crafted...

CVE-2006-5171

Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates CA Brightstor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Protection Suites r2 allows remote attackers to execute arbitrary code via crafted SUNRPC packets, aka the "Mediasvr.exe Overflow...

CVE-2006-5172

Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates CA Brightstor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Protection Suites r2 allows remote attackers to execute arbitrary code via crafted SUNRPC packets, aka the "Mediasvr.exe String...

CVE-2006-5171

Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates CA Brightstor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Protection Suites r2 allows remote attackers to execute arbitrary code via crafted SUNRPC packets, aka the "Mediasvr.exe Overflow...

CVE-2006-5171

CVE-2006-5171 is a stack-based buffer overflow in the SUN RPC interface of Mediasvr.exe used by CA Brightstor ARCserve Backup (9.01–11.5), Enterprise Backup 10.5, and CA Protection Suites r2. The flaw allows remote attackers to execute arbitrary code via crafted SUNRPC packets. Related entries (e...

CVE-2006-5172

The CVE-2006-5172 entry covers a stack-based buffer overflow in the SUN RPC service (SUNRPC interface) of Mediasvr.exe within CA Brightstor ARCserve Backup 9.01–11.5, CA Enterprise Backup 10.5, and CA Protection Suites r2. The underlying flaw is a buffer overflow triggered by crafted SUNRPC packe...

CVE-2006-5171: Undefined Security Weakness

Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates CA Brightstor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Protection Suites r2 allows remote attackers to execute arbitrary code via crafted SUNRPC packets, aka the "Mediasvr.exe Overflow...

CVE-2006-5172: Undefined Security Weakness

Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates CA Brightstor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Protection Suites r2 allows remote attackers to execute arbitrary code via crafted SUNRPC packets, aka the "Mediasvr.exe String...

CA BrightStor ARCserve Backup Multiple Vulnerabilities (QO84983)

According to its version, the installation of BrightStor ARCserve Backup on the remote host is affected by multiple buffer overflows that can be exploited by an unauthenticated, remote attacker to execute arbitrary code on the affected host with SYSTEM privileges. C Tenable Network Security, Inc...

arcserve.py.txt

!/usr/bin/python Remote exploit for buffer overflow vulnerability in CA BrightStor Arcserve tapeeng.exe service. Tested on windows 2000 SP4. Binds shell to TCP port 4443 Winny M Thomas ;- Author shall bear no responsibility for any screw ups caused by using this code from impacket.dcerpc import...

[CAID 34955, 34956, 34957, 34958, 34959, 34817]: CA BrightStor ARCserve Backup Multiple Overflow Vulnerabilities

Title: CAID 34955, 34956, 34957, 34958, 34959, 34817: BrightStor ARCserve Backup Multiple Overflow Vulnerabilities CA Vuln ID CAID: 34955, 34956, 34957, 34958, 34959, 34817 CA Advisory Date: 2007-01-11 Discovered By: TippingPoint, IBM ISS, iDefense Labs Impact: Remote attacker can execute arbitra...

ZDI-07-004: CA BrightStor ARCserve Backup Tape Engine Buffer Overflow Vulnerability

ZDI-07-004: CA BrightStor ARCserve Backup Tape Engine Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-004.html January 11, 2007 -- CVE ID: CVE-2007-0169 -- Affected Vendor: Computer Associates -- Affected Products: BrightStor ARCserve Backup r11.5 BrightStor...

CVE-2007-0168

The Tape Engine service in Computer Associates CA BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/Business Protection Suite r2 allows remote attackers to execute arbitrary code via certain data in opnum 0xBF in an RPC request, which is directly executed...