RE: BrightStor ARCserve Backup buffer overflow PoC (fixes available)

[Williams, James K]

> Subject: BrightStor ARCserve Backup buffer overflow PoC
> From: <cybertronic () gmx ! net>
> Date: 2005-02-11 18:19:23
> Message-ID: <20050211181923.27031.qmail () www ! securityfocus ! com>
>
> //cybertronic@gmx.net
>=20
> #include <stdio.h>
> [...snip...]


FYI - we have now posted fixes for several versions and platforms:
=20
The 32 bit versions of the update have been posted, including the r11.1
repost.
=20
BAB r11.1 Windows (repost):
http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=3DQO64538=
&
startsearch=3D1
BAB r11.0 Windows:
http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=3DQO64539=
&
startsearch=3D1
BEB 10.5 Windows:
http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=3DQO64540=
&
startsearch=3D1
BAB 9.01 NetWare:
http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=3DQO64541=
&
startsearch=3D1
BAB 9.01 Windows:
http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=3DQO64542=
&
startsearch=3D1
BAB r11.1 NetWare:
http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=3DQO64543=
&
startsearch=3D1
BEB 10.0 Windows:
http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=3DQO64544=
&
startsearch=3D1

Please note any prerequisites.

Patches for additional versions and platforms (including 64 bit) will be
posted shortly.

Regards,
Ken Williams
=20
Ken Williams, Director, Research ; 0xE2941985
Computer Associates ; james.williams@ca.com=20
A9F9 44A6 B421 FF7D 4000 E6A9 7925 91DF E294 1985