SecurityTracker.com
    Home    |    View Topics    |    Search    |    Contact Us    |   

SecurityTracker
Archives


 


Category:   Application (Generic)  >   CA ARCserve Backup Vendors:   CA
CA ARCserve Backup Input Validation Flaw in LDBserver Lets Remote Users Execute Arbitrary Code
SecurityTracker Alert ID:  1021385
SecurityTracker URL:  http://securitytracker.com/id/1021385
CVE Reference:   CVE-2008-5415   (Links to External Site)
Date:  Dec 11 2008
Impact:   Execution of arbitrary code via network, User access via network
Fix Available:  Yes  Vendor Confirmed:  Yes  
Version(s): 11.1, 11.5, 12.0
Description:   A vulnerability was reported in CA ARCserve Backup. A remote user can execute arbitrary code on the target system.

A remote user can send specially crafted data to the LDBserver service to execute arbitrary code on the target system. The code will run with the privileges of the target service.

CA Server Protection Suite r2, CA Business Protection Suite r2, CA Business Protection Suite for Microsoft Small Business Server Standard Edition r2, and CA Business Protection Suite for Microsoft Small Business Server Premium Edition r2 are also affected.

Client installations are not affected.

Dyon Balding of Secunia Research reported this vulnerability.

Impact:   A remote user can execute arbitrary code on the target system.
Solution:   The vendor has issued the following fixes:

CA ARCserve Backup r12.0 Windows:
Apply Service Pack 1 (RO01340)

CA ARCserve Backup r11.5 Windows:
RO04383

CA ARCserve Backup r11.1 Windows:
RO04382

CA Protection Suites r2:
RO04383

The vendor's advisories are available at:

http://community.ca.com/blogs/casecurityresponseblog/archive/2008/12/10.aspx
https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=194293

Vendor URL:  community.ca.com/blogs/casecurityresponseblog/archive/2008/12/10.aspx (Links to External Site)
Cause:   Input validation error
Underlying OS:  Windows (Any)

Message History:   None.


 Source Message Contents

Subject:  CA ARCserve Backup LDBserver Vulnerability


Title: CA ARCserve Backup LDBserver Vulnerability


CA Advisory Date: 2008-12-10


Reported By:
Dyon Balding of Secunia Research


Impact: A remote attacker can cause a denial of service or execute 
arbitrary code.


Summary: CA ARCserve Backup contains a vulnerability that can 
allow a remote attacker to cause a denial of service or execute 
arbitrary code. CA has issued patches to address the 
vulnerability. The vulnerability, CVE-2008-5415, is due to 
insufficient verification of client data. A remote attacker can 
crash the LDBserver service or execute arbitrary code in the 
context of the service. Note: The client installation is not 
affected.


Mitigating Factors: The client installation is not affected.


Severity: CA has given this vulnerability a High risk rating.


Affected Products:
CA ARCserve Backup r12.0 Windows
CA ARCserve Backup r11.5 Windows*
CA ARCserve Backup r11.1 Windows*
CA Server Protection Suite r2
CA Business Protection Suite r2
CA Business Protection Suite for Microsoft Small Business Server 
   Standard Edition r2
CA Business Protection Suite for Microsoft Small Business Server 
   Premium Edition r2

*Formerly known as BrightStor ARCserve Backup.


Non-Affected Products
CA ARCserve Backup r12.0 Windows SP1


Affected Platforms:
Windows


Status and Recommendation:
CA has issued the following patches to address the vulnerability.

CA ARCserve Backup r12.0 Windows:
Apply Service Pack 1 (RO01340)

CA ARCserve Backup r11.5 Windows:
RO04383

CA ARCserve Backup r11.1 Windows:
RO04382

CA Protection Suites r2:
RO04383


How to determine if you are affected:

CA ARCserve Backup r12.0 Windows,
CA ARCserve Backup r11.5 Windows:

1. Run the ARCserve Patch Management utility. From the Windows 
   Start menu, it can be found under:
   Programs > CA > ARCserve Patch Management > Patch Status

2. The main patch status screen will indicate if the respective 
   patch in the below table is currently applied. If the patch is 
   not applied, the installation is vulnerable.

Product                             Patch
CA ARCserve Backup r12.0 Windows    RO01340
CA ARCserve Backup r11.5 Windows*   RO04383

For more information on the ARCserve Patch Management utility, 
read document TEC446265.

Alternatively, use the file information below to determine if the 
product installation is vulnerable.

CA ARCserve Backup r11.1 Windows:

1. Using Windows Explorer, locate the file "DBserver.dll". By 
   default, the file is located in the 
   "C:\Program Files\CA\BrightStor ARCserve Backup" directory.

2. Right click on the file and select Properties.

3. Select the General tab.

4. If the file timestamp is earlier than indicated in the table 
   below, the installation is vulnerable.

Product version:  CA ARCserve Backup r11.1 Windows
File Name:  DBserver.dll
File Size:  675840 bytes
Timestamp:  11/25/2008 09:32:21

*CA Protection Suites r2 includes CA ARCserve Backup 11.5


Workaround: None


References (URLs may wrap):
CA Support:
http://support.ca.com/
Security Notice for CA ARCserve Backup LDBserver
https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=1942
93
Solution Document Reference APARs:
RO01340, RO04383, RO04382
CA Security Response Blog posting:
CA ARCserve Backup LDBserver Vulnerability
community.ca.com/blogs/casecurityresponseblog/archive/2008/12/10.aspx
Reported By: 
Dyon Balding of Secunia Research
CVE References:
CVE-2008-5415 - LDBserver code execution
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5415
OSVDB References: Pending
http://osvdb.org/


Changelog for this advisory:
v1.0 - Initial Release


Customers who require additional information should contact CA
Technical Support at http://support.ca.com.

For technical questions or comments related to this advisory, 
please send email to vuln AT ca DOT com.

If you discover a vulnerability in CA products, please report your 
findings to the CA Product Vulnerability Response Team.
https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=1777
82


Regards,
Ken Williams, Director ; 0xE2941985
CA Product Vulnerability Response Team


CA, 1 CA Plaza, Islandia, NY 11749
	
Contact http://www.ca.com/us/contact/
Legal Notice http://www.ca.com/us/legal/
Privacy Policy http://www.ca.com/us/privacy/
Copyright (c) 2008 CA. All rights reserved.

 
 


Go to the Top of This SecurityTracker Archive Page





Home   |    View Topics   |    Search   |    Contact Us

This web site uses cookies for web analytics. Learn More

Copyright 2022, SecurityGlobal.net LLC