CVE-2006-5142

Related Files

TSRT-06-12.txt

Posted Oct 9, 2006

Authored by Pedram Amini | Site tippingpoint.com

A vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Computer Associates ARCserver Backup. Authentication is not required exploit this vulnerability and both the client and server are affected. The problem specifically exists within the handling of long messages received over the Mailslot named 'CheyenneDS'. As no explicit MaxMessageSize is supplied in the call to CreateMailslot, an attacker can cause an exploitable stack-based buffer overflow.

tags | advisory, remote, overflow, arbitrary

advisories | CVE-2006-5142

SHA-256 | c63b9f680348a05a9c714b24b61cca1344e26cdd1b743becb2ce05d8cbabd78d

Download | Favorite | View