CVE:CVE-2008-2242
CNNVD:CNNVD-200805-275
BrightStor ARCserve Backup可为各种平台的服务器提供备份和恢复保护功能。
如果向ARCserve Backup的xdr_rwsstring()库函数传送了超长参数的话，就可能触发栈溢出，导致执行任意指令。
solution:Upgrade broadcom brightstor_arcserve_backup to a higher version than 11.1,11.5,and avoid the version 11.1,11.5; Upgrade ca brightstor_arcserve_backup to a higher version than 11.0,and avoid the version 11.0