high7.5Public exploit code
CVE-2005-1272
Stack-based buffer overflow in the Backup Agent for Microsoft SQL Server in BrightStor ARCserve Backup Agent for SQL Server 11.0 allows remote attackers to exe…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- CA BrightStor Agent for Microsoft SQL - Remote Overflow (Metasploit)2010-04-30 · remote · windows · Verified
- CA BrightStor ARCserve Backup Agent - 'dbasqlr.exe' Remote Overflow2005-08-03 · remote · windows · Verified
Impact
Stack-based buffer overflow in the Backup Agent for Microsoft SQL Server in BrightStor ARCserve Backup Agent for SQL Server 11.0 allows remote attackers to execute arbitrary code via a long string sent to port (1) 6070 or (2) 6050.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Broadcom | Brightstor Enterprise Backup | Versions 10.0, 10.5 |
| Ca | Brightstor Arcserve Backup | Versions 9.0.1, 9.0_1, 11.0, 11.1 |
| Ca | Brightstor Arcserve Backup Agent | Versions 9.0.1, 11, 11.0, 11.1 |
| Ca | Brightstor Enterprise Backup Agent | Versions 10.0, 10.5 |
References
- NVD record
- CVE.org record
- http://www.idefense.com/application/poi/display?id=287&type=vulnerabilities&flashstatus=true
- http://www.kb.cert.org/vuls/id/279774
- http://www.securityfocus.com/bid/14453
- http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33239
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21656
- http://www.idefense.com/application/poi/display?id=287&type=vulnerabilities&flashstatus=true
- http://www.kb.cert.org/vuls/id/279774
- http://www.securityfocus.com/bid/14453
- http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33239
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21656