CVE-2008-1329

Related Files

CAarc-multi.txt

Posted Apr 5, 2008

Authored by Ken Williams | Site www3.ca.com

CA Security Advisory - CA ARCserve Backup for Laptops and Desktops Server contains multiple vulnerabilities that can allow a remote attacker to execute arbitrary code or cause a denial of service condition. CA has issued updates to address the vulnerabilities. The first issue occurs due to insufficient bounds checking on command arguments by the LGServer service. The second issue occurs due to insufficient verification of file uploads by the NetBackup service. In most cases, an attacker can potentially gain complete control of an affected installation. Additionally, only a server installation of BrightStor ARCserve Backup for Laptops and Desktops is affected. The client installation is not affected.

tags | advisory, remote, denial of service, arbitrary, vulnerability, file upload

advisories | CVE-2008-1328, CVE-2008-1329

SHA-256 | 465613d80f35d24daf2fd29de5df3e3834e3533ddc03f34fa29343c01188d0fe

Download | Favorite | View