CA BrightStor ARCserve Backup Discovery Service Remote Buffer Overflow
Severity: CRITICAL
CVE Identifier: CVE-2005-0260
Advisory Date: JUL 21, 2015
DESCRIPTION
Stack-based buffer overflow in the Discovery Service for BrightStor ARCserve Backup 11.1 and earlier allows remote attackers to execute arbitrary code via a long packet to UDP port 41524, which is not properly handled in a recvfrom call.
TREND MICRO PROTECTION INFORMATION
Apply associated Trend Micro DPI Rules.
SOLUTION
Trend Micro Deep Security DPI Rule Number: 1006113
Trend Micro Deep Security DPI Rule Name: 1001202 - Identified Suspicious Usage Of Shellcode Encoders
AFFECTED SOFTWARE AND VERSION
- Computer Associates BrightStor ARCServe Backup 11.1
