CVE-2005-1018

CA BrightStor ARCserve Backup - Buffer Overflow

Title source: llm

Description

Buffer overflow in the UniversalAgent for Computer Associates (CA) BrightStor ARCserve Backup allows remote authenticated users to cause a denial of service or execute arbitrary code via an agent request to TCP port 6050 with a large argument before the option field.

Exploits (2)

exploitdb WORKING POC VERIFIED

by Metasploit · rubyremotewindows

https://www.exploit-db.com/exploits/16405

View Code ZIP pw:eip

metasploit WORKING POC NORMAL

by hdm · rubypocwin

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/brightstor/universal_agent.rb

View Code ZIP pw:eip

References (4)

[Mailing List] http://marc.info/?l=bugtraq&m=111351851802682&w=2

[Various Sources] http://www.idefense.com/application/poi/display?id=232&type=vulnerabilities

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/390760

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/13102

Scores

EPSS 0.7174

EPSS Percentile 98.7%

Details

Status published

Products (1)

ca/brightstor_arcserve_backup 11.1

Published May 02, 2005

Tracked Since Feb 18, 2026