CVE-2001-1346

Description

Computer Associates ARCserveIT 6.61 and 6.63 (also called ARCservIT) allows local users to overwrite arbitrary files via a symlink attack on the temporary files (1) asagent.tmp or (2) inetd.tmp.

Affected products

• Broadcom / arcserve_backup6.61 – 6.61
• ca / arcserve_backup6.63 – 6.63

Exploits & proofs of concept

• exploit-dbARCservIT 6.61/6.63 Client - inetd.tmp Arbitrary File Overwriteby Jonas Eriksson
• exploit-dbARCservIT 6.61/6.63 Client - asagent.tmp Arbitrary File Overwriteby Jonas Eriksson

References

• MISChttp://archives.neohapsis.com/archives/bugtraq/2001-05/0184.html
• MISChttp://www.securityfocus.com/bid/2748
• MISChttp://www.securityfocus.com/bid/2741