Description
The LDBserver service in the server in CA ARCserve Backup 11.1 through 12.0 on Windows allows remote attackers to execute arbitrary code via a handle_t argument to an RPC endpoint in which the argument refers to an incompatible procedure.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.securityfocus.com/archive/1/499128/100/0/threaded ↗
- http://secunia.com/secunia_research/2007-82/ ↗
- http://secunia.com/advisories/27299 ↗
- http://securityreason.com/securityalert/4708 ↗
- http://www.vupen.com/english/advisories/2008/3404 ↗
- http://osvdb.org/50683 ↗
- http://www.securityfocus.com/bid/32764 ↗
- http://www.securityfocus.com/archive/1/499104/100/0/threaded ↗
- https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=194293 ↗
- http://community.ca.com/blogs/casecurityresponseblog/archive/2008/12/10.aspx ↗