CVE:CVE-2005-1272
CNNVD:CNNVD-200508-064
BrightStor ARCserve Backup可为各种平台的服务器提供备份和恢复保护功能。
BrightStor ARCserve Backup和BrightStor Enterprise Backup Agents for Windows中存在栈溢出漏洞，可能允许远程攻击者以系统权限执行任意代码或导致拒绝服务。溢出的起因是没有对发送给6070端口的数据执行正确的边界检查。
solution:Upgrade broadcom brightstor_enterprise_backup to a higher version than 10.0,10.5,and avoid the version 10.0,10.5; Upgrade ca brightstor_arcserve_backup to a higher version than 9.0.1,9.0_1,11.0,11.1,and avoid the version 9.0.1,9.0_1,11.0,11.1; Upgrade ca brightstor_arcserve_backup_agent to a higher version than 9.0.1,11,11.0,11.1,and avoid the version 9.0.1,11,11.0,11.1; Upgrade ca brightstor_enterprise_backup_agent to a higher version than 10.0,10.5,and avoid the version 10.0,10.5