Signature Detail

HTTP: CA BrightStor ARCserve Backup AddColumn ActiveX Buffer Overflow

This signature detects attempts to exploit a known vulnerability in CA BrightStor ARCserve Backup ActiveX Control (ListCtrl.ocx). An attacker can create a malicious Web site containing Web pages with dangerous ActiveX calls, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.

Extended Description

The Unicenter DSM r11 List Control ATX ActiveX control, included with CA BrightStor ARCserve Backup, is prone to a buffer-overflow vulnerability because it fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. An attacker can exploit this issue to execute arbitrary code in the context of an application running the control (typically Internet Explorer). Failed attacks will cause denial-of-service conditions.

Affected Products

• Computer_associates arcserve_backup_for_laptops_and_desktops 11.5
• Computer_associates desktop_management_suite 11.1
• Computer_associates desktop_management_suite 11.2
• Computer_associates desktop_management_suite 11.2a
• Computer_associates desktop_management_suite 11.2 C1
• Computer_associates listctrl.ocx_(unicenter_dsm_r11_list_control_atx) 11.2.3.1895
• Computer_associates unicenter_asset_management 11.1
• Computer_associates unicenter_asset_management 11.2
• Computer_associates unicenter_asset_management 11.2a
• Computer_associates unicenter_asset_management 11.2 C1
• Computer_associates unicenter_desktop_management_bundle 11.1
• Computer_associates unicenter_desktop_management_bundle 11.2
• Computer_associates unicenter_desktop_management_bundle 11.2a
• Computer_associates unicenter_desktop_management_bundle 11.2 C1
• Computer_associates unicenter_remote_control 11.1
• Computer_associates unicenter_remote_control 11.2
• Computer_associates unicenter_remote_control 11.2a
• Computer_associates unicenter_remote_control 11.2 C1
• Computer_associates unicenter_software_delivery 11.1
• Computer_associates unicenter_software_delivery 11.2
• Computer_associates unicenter_software_delivery 11.2a
• Computer_associates unicenter_software_delivery 11.2 C1

References

• BugTraq: 28268
• CVE: CVE-2008-1472