Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 146377 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.102018
Kategorie:Buffer overflow
Titel:CA ARCserve Backup Multiple Buffer Overflow Vulnerabilities
Zusammenfassung:Multiple stack-based buffer overflows in CA (Computer Associates); BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allow remote attackers to; execute arbitrary code via a long (1) username or (2) password to the rxrLogin command in rxRPC.dll,; or a long (3) username argument to the GetUserInfo function.
Beschreibung:Summary:
Multiple stack-based buffer overflows in CA (Computer Associates)
BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allow remote attackers to
execute arbitrary code via a long (1) username or (2) password to the rxrLogin command in rxRPC.dll,
or a long (3) username argument to the GetUserInfo function.

Solution:
The vendor released an advisory and updates to address these issues.
Please see the references for more information.

CVSS Score:
10.0

CVSS Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2007-5003
BugTraq ID: 24348
http://www.securityfocus.com/bid/24348
Bugtraq: 20070921 [CAID 35673, 35674, 35675, 35676, 35677]: CA ARCserve Backup for Laptops and Desktops Multiple Server Vulnerabilities (Google Search)
http://www.securityfocus.com/archive/1/480252/100/100/threaded
eEye Security Advisory: 20070920 Multiple Vulnerabilities in CA ARCserve for Laptops & Desktops
http://research.eeye.com/html/advisories/published/AD20070920.html
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=599
http://www.securitytracker.com/id?1018728
http://secunia.com/advisories/25606
CopyrightCopyright (C) 2010 LSS

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.