| Package | Affected versions | Patched versions |
|---|---|---|
| brightstor arcserve backup | = 11.1= 11.5= 9.01 | |
| brightstor enterprise backup | = 10.5 | |
| business protection suite | = 2.0 | |
| server protection suite | = 2 | |
| brightstor arcserve backup | = 11 | |
| business protection suite | = 2.0 |
Queue.dll for the message queuing service (LQserver.exe) in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows remote attackers to execute arbitrary code via a malformed ONRPC protocol request for operation 0x76, which causes ARCserve Backup to dereference arbitrary pointers.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free