Signature Detail

APP: CA BrightStor ARCserve Backup caloggerd Stack Buffer Overflow

This signature detects attempts to exploit a known vulnerability in the CA Brightstor ARCserve Backup server. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the server.

Extended Description

Computer Associates ARCserve Backup is prone to multiple remote vulnerabilities: - An arbitrary-file-overwrite vulnerability - A stack-based buffer-overflow vulnerability. An attacker can exploit these issues to execute arbitrary code with SYSTEM-level privileges. Successfully exploiting these issues will result in the complete compromise of affected computers. Failed exploit attempts will result in a denial-of-service condition.

Affected Products

• Computer_associates brightstor_arcserve_backup 11
• Computer_associates brightstor_arcserve_backup 11.1.0
• Computer_associates brightstor_arcserve_backup 11.5
• Computer_associates business_protection_suite r2
• Computer_associates business_protection_suite_for_microsoft_sbs_pre_ed r2
• Computer_associates business_protection_suite_for_microsoft_sbs_std_ed r2
• Computer_associates server_protection_suite r2

References

• BugTraq: 29283
• CVE: CVE-2008-2242