Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
HTTP:MISC:GWT-INFO-DISC |
|---|---|
Severity |
Minor |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
CA ARCserve D2D GWT RPC Request Credentials Disclosure |
Release Date |
2011/08/25 |
Update Number |
1980 |
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
HTTP: CA ARCserve D2D GWT RPC Request Credentials Disclosure
This signature detects attempts to exploit a known vulnerability against CA ARCserve D2D. A successful attack can result in credentials disclosure and thereafter arbitrary code execution.
Extended Description
Computer Associates ARCserve D2D is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may lead to further attacks such as arbitrary code execution attack.
Affected Products
- Computer_associates arcserve_backup_for_windows_d2d_option_basic_edition r15
- Computer_associates arcserve_d2d r15
- Computer_associates arcserve_d2d_for_windows_server_standard_edition r15
References
- BugTraq: 48897
- CVE: CVE-2011-3011