Computer Associates BrightStor ARCserve Backup Catirpc.EXE远程拒绝服务漏洞

2007-02-0700:00:00

Root

www.seebug.org

JSON

Computer Associates BrightStor ARCserve Backup是一款企业级别的备份解决方案。
BrightStor AECserver Backup包含的Catirpc.exe处理TADDR2UADDR过程存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。
Catirpc.exe是为BrightStor Backup产品提供末端映射和启用RPC服务的程序。CATIRPC.dll不正确处理用于与CA RPC服务器通信的TADDR2UADDR过程，可导致一个NULL指针引用而造成拒绝服务攻击。

Computer Associates BrightStor ARCServe Backup 11.5
Computer Associates BrightStor ARCServe Backup 11.1
Computer Associates BrightStor ARCServe Backup 11.5.SP2
Computer Associates BrightStor ARCServe Backup 11.5.SP1
Computer Associates BrightStor ARCServe Backup 11.5
Computer Associates BrightStor ARCServe Backup 11.5
Computer Associates BrightStor ARCServe Backup 11
目前没有解决方案提供,请关注以下链接：
<a href=“http://www3.ca.com/Solutions/ProductFamily.asp?ID=115” target=“_blank”>http://www3.ca.com/Solutions/ProductFamily.asp?ID=115</a>


                                                #!/usr/bin/ruby
#&nbsp;&nbsp;
#&nbsp;Computer&nbsp;Associates&nbsp;(CA)&nbsp;Brightstor&nbsp;Backup&nbsp;Remote&nbsp;Procedure&nbsp;Call&nbsp;
Server&nbsp;DoS&nbsp;(catirpc.dll)
#
#&nbsp;Catirpc.exe&nbsp;-&nbsp;Prov

JSON