Signature Detail
Short Name |
APP:CA:ARCSRV:MAILSLOT-OF |
|---|---|
Severity |
Medium |
Recommended |
No |
Recommended Action |
Drop |
Category |
APP |
Keywords |
Computer Associates ARCserve Mailslot Overflow |
Release Date |
2011/03/11 |
Update Number |
1881 |
Supported Platforms |
idp-4.1.110110609+, isg-3.4.139899+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
APP: Computer Associates ARCserve Mailslot Overflow
This signature detects attempts to exploit a known vulnerability in the Computer Associates Products Discovery Service. An unauthenticated remote attacker can use this vulnerability to remotely inject and execute code on the system with System level privileges.
Extended Description
Multiple Computer Associates products are prone to a remote stack-based buffer-overflow vulnerability. This issue arises because these applications fail to perform boundary checks before copying user-supplied data into insufficiently sized buffers. A successful attack may result in arbitrary code execution with the privileges of the affected application. This issue affects client and server versions of the affected products.
Affected Products
- Computer Associates BrightStor ARCServe Backup 11.1.0
- Computer Associates BrightStor ARCServe Backup 11.5.0
- Computer Associates BrightStor ARCServe Backup 9.01
- Computer Associates BrightStor ARCServe Backup for Windows 11.0.0
- Computer Associates BrightStor Enterprise Backup 10.5.0
- Computer Associates Business Protection Suite r2
- Computer Associates Business Protection Suite for Microsoft SBS Pre ed r2
- Computer Associates Business Protection Suite for Microsoft SBS Std Ed r2
- Computer Associates Server Protection Suite r2
References
- BugTraq: 20364
- CVE: CVE-2006-5142