CVE-2005-1018

Description

Buffer overflow in the UniversalAgent for Computer Associates (CA) BrightStor ARCserve Backup allows remote authenticated users to cause a denial of service or execute arbitrary code via an agent request to TCP port 6050 with a large argument before the option field.

Affected products

• ca / brightstor_arcserve_backup11.1 – 11.1

Exploits & proofs of concept

• exploit-dbCA BrightStor Universal Agent - Remote Overflow (Metasploit)by Metasploit

References

• MAILING_LISThttp://marc.info/?l=bugtraq&m=111351851802682&w=2
• MISChttp://www.securityfocus.com/bid/13102
• MISChttp://www.securityfocus.com/archive/1/390760
• MISChttp://www.idefense.com/application/poi/display?id=232&type=vulnerabilities