項目
|
|
攻撃
|
リモート
|
攻撃ポート
|
41523
|
対象OS
|
Windows
|
CVE
|
|
APAR
|
Q064538
|
攻撃の概要
ISS X-Force
BrightStor Discovery servicepc buffer overflow
http://www.iss.net/security_center/static/19320.php
検証環境
優先度
|
OS
|
IP
|
Intruder:
|
Windows2000
|
192.168.221.110
|
Victim:
|
Windows2000
|
192.168.221.180
|
センサ-
|
ProvenitaM10
|
XPU1.66
|
実証コード
[root@linux _Other]# ./CABrightStorSQL_exp 192.168.221.180
connecting to 192.168.221.180:41523...ok!
attacking with 4128 bytes...done!
トレース
イベント一覧
優先度
|
シグネチャ名
|
検知件数
|
High
|
BrightStor_Discovery_Overflow
|
1
|
Low
|
TCP_Probe_Other
|
1
|
イベント詳細
参考情報
BugTraq Mailing List, Fri Feb 11 2005 - 12:19:23 CST , BrightStor ARCserve Backup buffer overflow PoC at http://archives.neohapsis.com/archives/bugtraq/2005-02/0123.html
.
BugTraq Mailing List, Sat Feb 12 2005 - 21:08:56 CST, Re: BrightStor ARCserve Backup buffer overflow PoC at http://archives.neohapsis.com/archives/bugtraq/2005-02/0144.html
.
BugTraq Mailing List, Wed Feb 16 2005 - 18:36:06 CST, RE: BrightStor ARCserve Backup buffer overflow PoC (fix available) at http://archives.neohapsis.com/archives/bugtraq/2005-02/0245.html
.
Computer Associates SupportConnect Web page, BRIGHTSTOR ARCSERVE BACKUP FOR WINDOWS COMMON- AXWBAS at http://supportconnect.ca.com/sc/solcenter/sol_detail.jsp?aparno=QO64496&os=NT&returninput=0
.
Computer Associates SupportConnect Web page, SupportConnect at http://supportconnect.ca.com/sc/solcenter/sol_detail.jsp?aparno=QO64538&os=NT&returninput=0&prev=true
.
