With the assistance of iDEFENSE, Computer Associates has identified a=20
buffer overflow vulnerability in the BrightStor ARCserve Backup
Universal=20
Agent Service for Windows and the BrightStor Enterprise Backup Universal

Agent Service for Windows. This service is a common component of Windows

based BrightStor ARCserve Backup and BrightStor Enterprise Backup
agents.=20
A remote attacker who successfully exploited this vulnerability could=20
potentially gain privileged access.

Computer Associates has posted patches that completely remediate this=20
vulnerability issue on the CA SupportConnect web site=20
(http://supportconnect.ca.com). iDEFENSE has confirmed that the patches=20
fully remediate the reported vulnerability. Computer Associates strongly

advises its customers to apply the patch immediately. See below for=20
patch details.

Title: Computer Associates BrightStor ARCserve Backup and BrightStor=20
Enterprise Backup UniversalAgent buffer overflow vulnerability

Date Published: Monday, April 11, 2005

CA Vulnerability ID: 32727

Impact: Remote attackers can execute arbitrary code.

Affected Technologies:
BrightStor ARCserve Backup (BAB) r11.1 Windows
BrightStor ARCserve Backup 11 for Windows
BrightStor ARCserve Backup 9.0 Windows
BrightStor ARCserve Backup r11.1 (64-bit) for Windows
BrightStor ARCserve Backup r11.1 Client Agent for Windows
BrightStor ARCserve Backup Release 11 (64-bit) for Windows
BrightStor ARCserve Backup v9.01 Client Agent for Windows
BrightStor ARCserve Backup v9.01 Client Agent for Windows Non-English
BrightStor ARCserve Backup v9.01 for Windows (64bit edition)
BrightStor ARCserve Backup v9.01 for Windows Non-English
BrightStor Enterprise Backup 10.0
BrightStor Enterprise Backup 10.5
BrightStor Enterprise Backup v10.5 for Windows (64bit edition)

Recommendations: Apply the patches.

Links to Knowledge Base Documents and Patches:
(Please note potential for line wrap)
BrightStor ARCserve Backup r11.1 for Windows (all components):
http://supportconnect.ca.com/sc/solc...rno=3DQO66526=
&
startsearch=3D1
BrightStor ARCserve Backup r11.1 Client Agent for Windows only:
http://supportconnect.ca.com/sc/solc...rno=3DQO66527=
&
startsearch=3D1
BrightStor ARCserve Backup r11.1 for Windows - 64 bit edition:
http://supportconnect.ca.com/sc/solc...rno=3DQO66534=
&
startsearch=3D1
BrightStor ARCserve Backup r11.0 for Windows:
http://supportconnect.ca.com/sc/solc...rno=3DQO66525=
&
startsearch=3D1
BrightStor ARCserve Backup r11.0 for Windows - 64 bit edition:
http://supportconnect.ca.com/sc/solc...rno=3DQO66535=
&
startsearch=3D1
BrightStor ARCserve Backup v9.01 for Windows English (all components):
http://supportconnect.ca.com/sc/solc...rno=3DQO66528=
&
startsearch=3D1
BrightStor ARCserve Backup v9.01 for Windows Non-English (all
components):
http://supportconnect.ca.com/sc/solc...rno=3DQO66529=
&
startsearch=3D1
BrightStor ARCserve Backup v9.01 for Windows - 64 bit edition:
http://supportconnect.ca.com/sc/solc...rno=3DQO66536=
&
startsearch=3D1
BrightStor ARCserve Backup v9.01 Client Agent for Windows only
(English):
http://supportconnect.ca.com/sc/solc...rno=3DQO66530=
&
startsearch=3D1
BrightStor ARCserve Backup v9.01 Client Agent for Windows only
(Non-English):
http://supportconnect.ca.com/sc/solc...rno=3DQO66531=
&
startsearch=3D1
BrightStor Enterprise Backup v10.5 for Windows:
http://supportconnect.ca.com/sc/solc...rno=3DQO66524=
&
startsearch=3D1
BrightStor Enterprise Backup v10.5 for Windows - 64 bit edition:
http://supportconnect.ca.com/sc/solc...rno=3DQO66533=
&
startsearch=3D1
BrightStor Enterprise Backup v10.0 for Windows:
http://supportconnect.ca.com/sc/solc...rno=3DQO66523=
&
startsearch=3D1=20
=20
References:
CA - CAID 32727
Computer Associates BrightStor ARCserve Backup UniversalAgent buffer=20
overflow vulnerability
http://www3.ca.com/securityadvisor/v...spx?id=3D32727
Mitre CVE - CAN-2005-1018=20
http://cve.mitre.org/cgi-bin/cvename...DCAN-2005-1018

Should you require additional information, please contact
CA Technical Support at http://supportconnect.ca.com.

Computer Associates International, Inc. (CA).=20
One Computer Associates Plaza. Islandia, NY 11749
=09
Contact Us http://ca.com/catalk.htm
Legal Notice http://ca.com/calegal.htm
Privacy Policy http://ca.com
Copyright 2005 Computer Associates International, Inc.=20
All rights reserved =09

--

Ken Williams ; Vulnerability Research=20
Computer Associates ; 0xE2941985
A9F9 44A6 B421 FF7D 4000 E6A9 7925 91DF E294 1985