Detections
Analytics
CA BrightStor ARCserve Backup for Laptops & Desktops Server Multiple Vulnerabilities (QO83833)
critical Nessus Plugin ID 24240
Language:
Synopsis
The remote backup server software is affected by multiple vulnerabilities.Description
According to its version, the installation of BrightStor ARCserve Backup for Laptops & Desktops Server on the remote host is affected by multiple buffer overflows and denial of service vulnerabilities that can be exploited by a remote attacker to execute arbitrary code on the affected host with LOCAL SYSTEM privileges or to crash the associated services.Solution
Apply the appropriate patch as described in the vendor advisory referenced above.See Also
https://seclists.org/bugtraq/2007/Jan/682
https://seclists.org/bugtraq/2007/Jan/683
https://seclists.org/bugtraq/2007/Jan/685
Plugin Details
Severity: Critical
ID: 24240
File Name: arcserve_qo83833.nasl
Version: 1.21
Type: remote
Agent: windows
Family: Windows
Published: 1/26/2007
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: High
Score: 7.4
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 8.3
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:ca:brightstor_arcserve_backup_laptops_desktops
Required KB Items: ARCSERVE/LGServer/Version
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 1/23/2007
Vulnerability Publication Date: 1/23/2007
Exploitable With
Metasploit (CA BrightStor ARCserve for Laptops and Desktops LGServer Buffer Overflow)