Technical Description

A vulnerability has been identified in CA BrightStor ARCserve Backup, which could be exploited by remote attackers to execute arbitrary commands or cause a denial of service [...]

Solution

Apply patch for BrightStor ARCserve Backup r11.5 :
https://supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO84983

Apply patch for BrightStor ARCserve Backup r11.1 :
https://supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO84984

Apply patch for BrightStor ARCserve Backup for Windows r11 :
https://supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QI82917

Apply patch for BrightStor Enterprise Backup r10.5 :
https://supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO84986

Apply patch for BrightStor ARCserve Backup v9.01 :
https://supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO84985

Credits

Vulnerability reported by LSsecurity

ChangeLog

2006-11-22 : Initial release
2007-01-12 : Updated Solution
2007-03-15 : Updated References

Vulnerability Management

Subscribe to VUPEN VNS and receive real-time e-mail and SMS alerts when new advisories or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.