| Package | Affected versions | Patched versions |
|---|---|---|
| brightstor arcserve backup laptops desktops | = 11.0= 11.1 | |
| business protection suite | = 2.0 | |
| desktop management suite | = 11.0= 11.1 | |
| desktop protection suite | = 2.0 | |
| business protection suite | = 2.0 |
LGSERVER.EXE in BrightStor Mobile Backup 4.0 allows remote attackers to cause a denial of service (disk consumption and daemon hang) via a value of 0xFFFFFF7F at a certain point in an authentication negotiation packet, which writes a large amount of data to a .USX file in CA_BABLDdata\Server\data\transfer\.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free