Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The RPC service in mediasvr.exe in CA BrightStor ARCserve Backup 11.5 SP2 build 4237 allows remote attackers to execute arbitrary code via crafted xdr_handle_t data in RPC packets, which is used in calculating an address for a function call, as demonstrated using the 191 (0xbf) RPC request.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
CA Brightstor Backup Mediasvr.exe 安全漏洞
Vulnerability Description
BrightStor ARCserve Backup可为各种平台的服务器提供备份和恢复保护功能。 BrightStor ARCserve Backup的Mediasvr.exe进程在处理特定的RPC报文数据时存在漏洞，远程攻击者可能利用此漏洞控制服务器。 Mediasvr.exe所导入的几个dll处理通过xdr过程的RPC数据时存在设计错误。RPC报文中的4个字节被处理为特定的地址，最终被加载到ECX。带有至少8字节NULL字符的191 (0xbf)号xdr过程调用会导致漏洞的触发。 .text:0040
CVSS Information
N/A
Vulnerability Type
N/A