From: Secunia Security Advisories (sec-advsecunia.com)
Date: Thu Sep 27 2007 - 11:17:12 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

----------------------------------------------------------------------

Try a new way to discover vulnerabilities that ALREADY EXIST in your
IT infrastructure.

The Secunia NSI enables you to INSPECT, DISCOVER, and DOCUMENT
vulnerabilities in more than 4,700 different Windows applications.

Request your account, the Secunia Network Software Inspector (NSI):
http://secunia.com/network_software_inspector/

----------------------------------------------------------------------

TITLE:
CA BrightStor Hierarchical Storage Manager CsAgent Vulnerabilities

SECUNIA ADVISORY ID:
SA26914

VERIFY ADVISORY:
http://secunia.com/advisories/26914/

CRITICAL:
Moderately critical

IMPACT:
Manipulation of data, DoS, System access

WHERE:
From local network

SOFTWARE:
CA BrightStor Hierarchical Storage Manager 11.x
http://secunia.com/product/15862/

DESCRIPTION:
Multiple vulnerabilities have been reported in CA BrightStor
Hierarchical Storage Manager, which can be exploited by malicious
people to conduct SQL injection attacks, cause a DoS (Denial of
Service), or compromise a vulnerable system.

1) Boundary errors in multiple CsAgent service commands can be
exploited to cause buffer overflows.

2) Input validation errors in multiple CsAgent service commands can
be exploited to cause buffer overflows.

Successful exploitation of the vulnerabilities may allow execution of
arbitrary code.

3) Input passed to multiple CsAgent service commands is not properly
verified before being used in an SQL statement. These can be
exploited to manipulate SQL queries by injecting arbitrary SQL code.

The vulnerabilities are reported in versions prior to 11.6.

SOLUTION:
Update to version r11.6.
http://supportconnectw.ca.com/premium/bstorhsm/downloads/BHSMr11_6.zip

PROVIDED AND/OR DISCOVERED BY:
The vendor credits:
1) An anonymous researcher, reported via IDefense Labs and Aaron
Portnoy, DV Labs
2) Sean Larsson, iDefense Labs
3) Aaron Portnoy, DV Labs

ORIGINAL ADVISORY:
CA:
http://supportconnectw.ca.com/public/bstorhsm/infodocs/bstorhsm-secnot.asp

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/

Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories

----------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]