>> CA BrightStor ARCserve Backup RPC Service Remote Denial of Service Vulnerability
Title : CA BrightStor ARCserve Backup RPC Service Remote Denial of Service Vulnerability VUPEN ID : VUPEN/ADV-2007-0461 CVE ID : CVE-2007-0816
Rated as : Low Risk
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2007-02-02
Technical Description
A vulnerability has been identified in CA BrightStor ARCserve Backup, which could be exploited by remote attackers to cause a denial of service. This issue is due to a Null pointer dereference error in the Remote Procedure Call Server (Catirpc.exe) when handling "TADDR2UADDR" requests sent to port 111/UDP, which could be exploited by remote unauthenticated attackers to crash a vulnerable application, creating a denial of service condition.