CVE-2004-0747

Security News - Security Reviews - Exploits - Tools - UNIX Focus - Windows Focus

SecuriTeam™
Beyond Security®

SecuriTeam™ Home
Ask the Team
Mailing Lists
Advertising Info
Blogs

	SecuriTeam™ in Your Inbox

	E-mail this CVE-2004-0747 to a friend

New vulnerability?
New tool?
Tell us

Credit:
The information has been provided by James K. Williams.
The original article can be found at: http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=205147

Website Security Scan	Code Vulnerability Test	Network Assessment Tool
Detect hidden vulnerabilities	Exhaustive automated testing	Real-time, continuous security
Get guidance from professionals	of internal or 3rd party code.	scanning for your entire network

Check for CVE-2004-0747

Vulnerability Assessment and Management.
Automated Pen Testing for 50 to 50,000 nodes
beyondsecurity.com/vulnerability-scanner

Vulnerable Systems:
* CA ARCserve Backup r11.5 Solaris
* CA ARCserve Backup r11.5 Tru64
* CA ARCserve Backup r11.5 HP-UX
* CA ARCserve Backup r11.5 AIX

Patch Availability:
* CA ARCserve Backup r11.5 Solaris: RO06786
* CA ARCserve Backup r11.5 Tru64: RO06788
* CA ARCserve Backup r11.5 HP-UX: RO06789
* CA ARCserve Backup r11.5 AIX: RO06791

Workaround:
As a workaround solution, disable the Apache HTTP Server with the "stopgui" command. To re-enable the server, run "startgui".

Stopping the Apache HTTP Server will prevent the ARCserve user from performing GUI operations. Most of the operations provided by the GUI can be accomplished via the command line.

Alternatively, restrict remote network access to reduce exposure.

CVE Information:
CVE-2004-0747
CVE-2003-0132

Security News - Security Reviews - Exploits - Tools - UNIX Focus - Windows Focus