Detections
Analytics
CA BrightStor ARCserve Backup DBASVR for Windows Multiple Remote Buffer Overflows
high Nessus Plugin ID 22511
Language:
Synopsis
Arbitrary code can be executed on the remote host.Description
This host is running BrightStor ARCServe DBA server for Windows.The remote version of this software is affected by multiple buffer overflow vulnerabilities.
An attacker, by sending a specially crafted packet, may be able to execute code on the remote host.
Solution
Apply service pack 2 for Arcserve 11.5 or install the security patch.See Also
http://www.tippingpoint.com/security/advisories/TSRT-06-11.html
Plugin Details
Severity: High
ID: 22511
File Name: arcserve_windows_dbasvr_multiple.nasl
Version: 1.20
Type: remote
Agent: windows
Family: Windows
Published: 10/6/2006
Updated: 6/27/2018
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: High
Score: 7.3
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.2
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Vulnerability Information
Required KB Items: ARCSERVE/Discovery/Version
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 10/5/2006
Vulnerability Publication Date: 10/5/2006
Exploitable With
CANVAS (CANVAS)
Core Impact
Metasploit (CA BrightStor ARCserve Message Engine Heap Overflow)
Reference Information
CVE: CVE-2006-5142, CVE-2006-5143