Computer Associates BrightStor ARCserve Backup and BrightStor Enterprise Backup UniversalAgent buffer overflow vulnerability
With the assistance of iDEFENSE, Computer Associates has identified a
buffer overflow vulnerability in the BrightStor ARCserve Backup
Universal
Agent Service for Windows and the BrightStor Enterprise Backup Universal
Agent Service for Windows. This service is a common component of Windows
based BrightStor ARCserve Backup and BrightStor Enterprise Backup
agents.
A remote attacker who successfully exploited this vulnerability could
potentially gain privileged access.
Computer Associates has posted patches that completely remediate this
vulnerability issue on the CA SupportConnect web site
(http://supportconnect.ca.com). iDEFENSE has confirmed that the patches
fully remediate the reported vulnerability. Computer Associates strongly
advises its customers to apply the patch immediately. See below for
patch details.
Title: Computer Associates BrightStor ARCserve Backup and BrightStor
Enterprise Backup UniversalAgent buffer overflow vulnerability
Date Published: Monday, April 11, 2005
CA Vulnerability ID: 32727
Impact: Remote attackers can execute arbitrary code.
Affected Technologies:
BrightStor ARCserve Backup (BAB) r11.1 Windows
BrightStor ARCserve Backup 11 for Windows
BrightStor ARCserve Backup 9.0 Windows
BrightStor ARCserve Backup r11.1 (64-bit) for Windows
BrightStor ARCserve Backup r11.1 Client Agent for Windows
BrightStor ARCserve Backup Release 11 (64-bit) for Windows
BrightStor ARCserve Backup v9.01 Client Agent for Windows
BrightStor ARCserve Backup v9.01 Client Agent for Windows Non-English
BrightStor ARCserve Backup v9.01 for Windows (64bit edition)
BrightStor ARCserve Backup v9.01 for Windows Non-English
BrightStor Enterprise Backup 10.0
BrightStor Enterprise Backup 10.5
BrightStor Enterprise Backup v10.5 for Windows (64bit edition)
Recommendations: Apply the patches.
Links to Knowledge Base Documents and Patches:
(Please note potential for line wrap)
BrightStor ARCserve Backup r11.1 for Windows (all components):
http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=QO66526&;
startsearch=1
BrightStor ARCserve Backup r11.1 Client Agent for Windows only:
http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=QO66527&;
startsearch=1
BrightStor ARCserve Backup r11.1 for Windows - 64 bit edition:
http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=QO66534&;
startsearch=1
BrightStor ARCserve Backup r11.0 for Windows:
http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=QO66525&;
startsearch=1
BrightStor ARCserve Backup r11.0 for Windows - 64 bit edition:
http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=QO66535&;
startsearch=1
BrightStor ARCserve Backup v9.01 for Windows English (all components):
http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=QO66528&;
startsearch=1
BrightStor ARCserve Backup v9.01 for Windows Non-English (all
components):
http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=QO66529&;
startsearch=1
BrightStor ARCserve Backup v9.01 for Windows - 64 bit edition:
http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=QO66536&;
startsearch=1
BrightStor ARCserve Backup v9.01 Client Agent for Windows only
(English):
http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=QO66530&;
startsearch=1
BrightStor ARCserve Backup v9.01 Client Agent for Windows only
(Non-English):
http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=QO66531&;
startsearch=1
BrightStor Enterprise Backup v10.5 for Windows:
http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=QO66524&;
startsearch=1
BrightStor Enterprise Backup v10.5 for Windows - 64 bit edition:
http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=QO66533&;
startsearch=1
BrightStor Enterprise Backup v10.0 for Windows:
http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=QO66523&;
startsearch=1
References:
CA - CAID 32727
Computer Associates BrightStor ARCserve Backup UniversalAgent buffer
overflow vulnerability
http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=32727
Mitre CVE - CAN-2005-1018
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-1018
Should you require additional information, please contact
CA Technical Support at http://supportconnect.ca.com.
Computer Associates International, Inc. (CA).
One Computer Associates Plaza. Islandia, NY 11749
Contact Us http://ca.com/catalk.htm
Legal Notice http://ca.com/calegal.htm
Privacy Policy http://ca.com
Copyright 2005 Computer Associates International, Inc.
All rights reserved
--
Ken Williams ; Vulnerability Research
Computer Associates ; 0xE2941985
A9F9 44A6 B421 FF7D 4000 E6A9 7925 91DF E294 1985