Signature Detail
Short Name |
APP:CA:DBA-SVR-POINT |
|---|---|
Severity |
High |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
APP |
Keywords |
CA Multiple Products DBASVR RPC Server Pointer Buffer Overflow |
Release Date |
2015/06/14 |
Update Number |
2506 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
APP: CA Multiple Products DBASVR RPC Server Pointer Buffer Overflow
There exists a buffer overflow vulnerability in multiple CA products. The problem specifically exists within DBASVR.exe, the Backup Agent RPC Server. The vulnerability is due to failing to bound check user supplied data in certain RPC requests. A remote unauthenticated attacker can exploit this vulnerability by sending a specially crafted RPC request to the affected interface. Successful exploitation would may lead to arbitrary code injection and execution with the privileges of the server process, typically System. An attack targeting this vulnerability can result in the injection and execution of code. If code execution is successful, the behaviour of the target will depend on the intention of the attacker. Any code injected will be executed with SYSTEM privileges on the targeted host. In the case of an unsuccessful code execution attack, CA DBASVR RPC Server will be terminated.
References
- BugTraq: 26015
- CVE: CVE-2007-5329