bugtraq - RE: BrightStor ARCserve Backup buffer overflow PoC (fix available)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Date: Wed, 16 Feb 2005 19:36:06 -0500
From: "Williams, James K" <James.Williams@...com>
To: <bugtraq@...urityfocus.com>
Subject: RE: BrightStor ARCserve Backup buffer overflow PoC (fix available)



> Subject:    BrightStor ARCserve Backup buffer overflow PoC
> From:       <cybertronic () gmx ! net>
> Date:       2005-02-11 18:19:23
> Message-ID: <20050211181923.27031.qmail () www ! securityfocus ! com>
>
> //cybertronic@....net
> 
> #include <stdio.h>
> [...snip...]


FYI - we have posted a fix for r11.1 Windows:
 
http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=QO64496&
startsearch=1

Please note the SP1 prerequisite.

Patches for additional versions and platforms will be posted shortly.

Regards,
Ken Williams
                                                         
Ken Williams, Director, Research ; 0xE2941985
Computer Associates ; james.williams@...com 
A9F9 44A6 B421 FF7D 4000 E6A9 7925 91DF E294 1985