CVE-2005-0349 Information

Description

The production release of the UniversalAgent for UNIX in BrightStor ARCserve Backup 11.1 contains hard-coded credentials which allows remote attackers to access the file system and possibly execute arbitrary commands.

Reference

http://secunia.com/advisories/14233 http://securitytracker.com/id?1013144 http://supportconnect.ca.com/sc/solcenter/sol_detail.jsp?aparno=QO63672&os=UNIX&returninput=0 http://www.idefense.com/application/poi/display?id=198&type=vulnerabilities http://www.osvdb.org/13706 http://www.securityfocus.com/bid/12522 http://www.vupen.com/english/advisories/2005/0145