|
|
|
|
| |
Credit:
The information has been provided by Williams, James K.
The original article can be found at: https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=194293
|
| |
Vulnerable Systems:
* CA ARCserve Backup r12.0 Windows
* CA ARCserve Backup r11.5 Windows*
* CA ARCserve Backup r11.1 Windows*
* CA Server Protection Suite r2
* CA Business Protection Suite r2
* CA Business Protection Suite for Microsoft Small Business Server Standard Edition r2
* CA Business Protection Suite for Microsoft Small Business Server Premium Edition r2
(*)Formerly known as BrightStor ARCserve Backup.
Immune Systems:
* CA ARCserve Backup r12.0 Windows SP1
Impact:
A remote attacker can cause a denial of service or execute arbitrary code.
CVE Information:
CVE-2008-5415
Status and Recommendation:
CA has issued the following patches to address the vulnerability.
CA ARCserve Backup r12.0 Windows:
Apply Service Pack 1 (RO01340)
CA ARCserve Backup r11.5 Windows:
RO04383
CA ARCserve Backup r11.1 Windows:
RO04382
CA Protection Suites r2:
RO04383
How to determine if you are affected:
CA ARCserve Backup r12.0 Windows, CA ARCserve Backup r11.5 Windows:
1. Run the ARCserve Patch Management utility. From the Windows Start menu, it can be found under:
Programs > CA > ARCserve Patch Management > Patch Status
2. The main patch status screen will indicate if the respective patch in the below table is currently applied. If the patch is not applied, the installation is vulnerable.
Product Patch
CA ARCserve Backup r12.0 Windows RO01340
CA ARCserve Backup r11.5 Windows* RO04383
For more information on the ARCserve Patch Management utility, read document TEC446265.
Alternatively, use the file information below to determine if the product installation is vulnerable.
CA ARCserve Backup r11.1 Windows:
1. Using Windows Explorer, locate the file "DBserver.dll". By default, the file is located in the
"C:\Program Files\CA\BrightStor ARCserve Backup" directory.
2. Right click on the file and select Properties.
3. Select the General tab.
4. If the file timestamp is earlier than indicated in the table below, the installation is vulnerable.
Product version: CA ARCserve Backup r11.1 Windows
File Name: DBserver.dll
File Size: 675840 bytes
Timestamp: 11/25/2008 09:32:21
*CA Protection Suites r2 includes CA ARCserve Backup 11.5
|
|
|
|
|
