Computer Associates BrightStor ARCserve Backup磁带引擎缓冲区溢出漏洞

2006-11-29T00:00:00
ID SSV:611
Type seebug
Reporter Root
Modified 2006-11-29T00:00:00

Description

Computer Associates BrightStor ARCserve Backup是一款企业级的备份服务器程序。

Computer Associates BrightStor ARCserve Backup的磁带引擎存在缓冲区溢出问题,远程攻击者可以利用漏洞以进程权限执行任意指令。

问题是由于磁带引擎服务程序(tapeeng.exe)不正确处理TCP 6502端口的RPC请求,目前没有详细漏洞细节提供。

Computer Associates BrightStor ARCServe Backup 11.5 <a href="http://www3.ca.com/Solutions/ProductFamily.asp?ID=115" target="_blank">http://www3.ca.com/Solutions/ProductFamily.asp?ID=115</a>