Signature Detail
Short Name |
APP:CA:ARCSRV:GWT-INFO-DISC |
|---|---|
Severity |
Medium |
Recommended |
No |
Recommended Action |
Drop |
Category |
APP |
Keywords |
CA ARCserve D2D GWT RPC Request Credentials Disclosure |
Release Date |
2011/08/25 |
Update Number |
1980 |
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
APP: CA ARCserve D2D GWT RPC Request Credentials Disclosure
This signature detects attempts to exploit a known vulnerability against CA ARCserve D2D. A successful attack can result in credentials disclosure and thereafter arbitrary code execution.
Extended Description
Computer Associates ARCserve D2D is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may lead to further attacks such as arbitrary code execution attack.
Affected Products
- Computer Associates ARCserve Backup for Windows D2D Option Basic Edition r15
- Computer Associates ARCServe D2D r15
- Computer Associates ARCserve D2D for Windows Server Standard Edition r15
References
- BugTraq: 48897