vendor:
CA BrightStor ARCserve
by:
MC
7.5
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: CA BrightStor ARCserve
Affected Version From: r11.1
Affected Version To: r11.5
Patch Exists: NO
Related CWE:
CPE:
Platforms Tested: Windows
2010
CA BrightStor ARCserve Tape Engine 0x8A Buffer Overflow
This module exploits a stack buffer overflow in Computer Associates BrightStor ARCserve Backup r11.1 - r11.5. By sending a specially crafted DCERPC request, an attacker could overflow the buffer and execute arbitrary code.
Mitigation:
Apply the latest patch from the vendor.