APP: Computer Associates ARCserve Universal Agent Overflow
This signature detects attempts to exploit a known vulnerability against CA BrightStor ARCserv Universal Agent service. A successful attack can lead to arbitrary code execution.
Extended Description
A remote buffer-overflow vulnerability affects BrightStor ARCserve and ARCserve Enterprise agent because the application fails to securely copy data from the network. A remote attacker may exploit this issue to execute arbitrary code on a vulnerable computer, potentially facilitating unauthorized superuser access. A denial-of-service condition may arise as well. BrightStor ARCserve Backup v11 for Win32 platforms is vulnerable; other versions may also be affected.
Affected Products
Computer_associates brightstor_arcserve_backup_for_windows_64_bit
Short Name
APP:CA:ARCSRV:UA-OF
Severity
Major
Recommended
False
Recommended Action
Drop
Category
APP
Keywords
ARCserve Agent Associates CVE-2005-1018 Computer Overflow Universal bid:13102
Release Date
07/08/2005
Supported Platforms
mx-19.3
vmx-19.3
vsrx-19.2
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-19.4
vsrx3bsd-19.4
srx-branch-19.4
vsrx-19.4
vmx-19.4
mx-19.4
srxevo-25.4
vsrx-26.2
srx-26.2
srx-branch-26.2
vsrx3bsd-26.2
mx-12.3
srx-12.3
srx-branch-12.3
vsrx-12.3
Sigpack Version
3724
Port
TCP/6050
False Positive
Unknown
Vendors
Computer_associates
CVSS Score
7.5