bugtraq - RE: BrightStor ARCserve Backup buffer overflow PoC (fixes available)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <D7DDF83751235046BFAC82E1244EB4C806EA0B6B@usilms23.ca.com>
Date: Thu, 17 Feb 2005 16:03:51 -0500
From: "Williams, James K" <James.Williams@...com>
To: <bugtraq@...urityfocus.com>
Subject: RE: BrightStor ARCserve Backup buffer overflow PoC (fixes available)



> Subject:    BrightStor ARCserve Backup buffer overflow PoC
> From:       <cybertronic () gmx ! net>
> Date:       2005-02-11 18:19:23
> Message-ID: <20050211181923.27031.qmail () www ! securityfocus ! com>
>
> //cybertronic@....net
> 
> #include <stdio.h>
> [...snip...]


FYI - we have now posted fixes for several versions and platforms:
 
The 32 bit versions of the update have been posted, including the r11.1
repost.
 
BAB r11.1 Windows (repost):
http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=QO64538&
startsearch=1
BAB r11.0 Windows:
http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=QO64539&
startsearch=1
BEB 10.5 Windows:
http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=QO64540&
startsearch=1
BAB 9.01 NetWare:
http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=QO64541&
startsearch=1
BAB 9.01 Windows:
http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=QO64542&
startsearch=1
BAB r11.1 NetWare:
http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=QO64543&
startsearch=1
BEB 10.0 Windows:
http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=QO64544&
startsearch=1

Please note any prerequisites.

Patches for additional versions and platforms (including 64 bit) will be
posted shortly.

Regards,
Ken Williams
                                                         
Ken Williams, Director, Research ; 0xE2941985
Computer Associates ; james.williams@...com 
A9F9 44A6 B421 FF7D 4000 E6A9 7925 91DF E294 1985