Home / vulnerabilities

PDF

LS-20061113.txt

Posted on 22 November 2006
Source : packetstormsecurity.org Link

 

LS-20061113

LSsec has discovered a vulnerability in
Computer Associates BrightStor ARCserve
Backup v11.5, which could be exploited by
an anonymous attacker in order to execute
arbitrary code with SYSTEM privileges on
an affected system.

The flaw specifically exists within the
Tape Engine (tapeeng.exe) due to incorrect
handling of RPC requests on TCP port 6502.

For technical details please visit:

http://www.lssec.com/charity.html

LSsecurity - LSsec.com

 

TOP