CVE-2012-2972 Information

Description

The (1) server and (2) agent components in CA ARCserve Backup r12.5 r15 and r16 on Windows do not properly validate RPC requests which allows remote attackers to cause a denial of service (service crash) via a crafted request.

Reference

http://osvdb.org/86415 http://packetstormsecurity.com/files/119543/Security-Notice-For-CA-ARCserve-Backup.html http://seclists.org/fulldisclosure/2013/Jan/86 http://secunia.com/advisories/51012 http://www.kb.cert.org/vuls/id/408099 https://exchange.xforce.ibmcloud.com/vulnerabilities/79477 https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=F9EEA31E-8089-423E-B746-41B5C9DD2AC1