CA BrightStor ARCserve Backup Discovery Service Remote Buffer Overflow
Publish Date: 21 de июля de 2015
Severity: : Critical
CVE Kennungen: : CVE-2005-0260
Advisory Date: 21 de июля de 2015
DESCRIPTION
Stack-based buffer overflow in the Discovery Service for BrightStor ARCserve Backup 11.1 and earlier allows remote attackers to execute arbitrary code via a long packet to UDP port 41524, which is not properly handled in a recvfrom call.
INFORMATION EXPOSURE
Apply associated Trend Micro DPI Rules.
SOLUTION
Trend Micro Deep Security DPI Rule Number: 1006113
Trend Micro Deep Security DPI Rule Name: 1001202 - Identified Suspicious Usage Of Shellcode Encoders
AFFECTED SOFTWARE AND VERSION:
- Computer Associates BrightStor ARCServe Backup 11.1