LS-20061002 - Computer Associates BrightStor ARCserve Backup Remote Code Execution Vulnerability

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: LS-20061002 - Computer Associates BrightStor ARCserve Backup Remote Code Execution Vulnerability
From: advisories@xxxxxxxxx
Date: 11 Jan 2007 22:36:54 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

LS-20061002

LSsec has discovered a vulnerability in Computer Associates BrightStor ARCserve 
Backup v11.5, which could be exploited by an anonymous attacker in order to 
execute arbitrary code with SYSTEM privileges on an affected system. The flaw 
specifically exists within the Tape Engine (tapeeng.exe) due to incorrect 
handling of RPC requests on TCP port 6502. The interface is identified by
62b93df0-8b02-11ce-876c-00805f842837. Opnum 191 specifies the vulnerable 
operation within this interface.

Technical details:

http://www.lssec.com/advisories.html

LSsecurity - LSsec.com

Prev by Date: Re: Perforce client: security hole by design
Next by Date: Nwom topsites v3.0
Previous by thread: [security bulletin] HPSBMA02176 SSRT051035 rev.1 - HP OpenView Network Node Manager (OV NNM) Remote Unauthorized Execution of Arbitrary Code
Next by thread: Nwom topsites v3.0
Index(es):
- Date
- Thread