Description:
Luigi Auriemma has reported a vulnerability in
CA ARCserve Backup, which can be exploited by malicious people to cause
a DoS (Denial of Service).
The vulnerability is caused due to an input validation error in the
Discovery Service and can be exploited to crash the service by sending
a specially crafted packet to port 41523/TCP.
The vulnerability is reported in version 12.0.5454.0. Other versions may also be affected.
Solution:
Restrict network access to the affected service.
Provided and/or discovered by:
Luigi Auriemma
Original Advisory:
http://aluigi.altervista.org/adv/carcbackazz-adv.txt
|
