A new remote code execution vulnerability on ARCServe Backup version 11.5 has been released today. The vulnerability exploits the handling of RPC requests on port 6502. Proof of concept code has been released to the public at this point. If you are running ARCServe, it's about time to patch now.
------------------- Jason Lam, jason /at/ networksec.org I will be teaching next: Defending Web Applications Security Essentials - SANS Rocky Mountain Spring: Virtual Edition 2021 |
Jason 93 Posts ISC Handler Nov 22nd 2006 |
Thread locked Subscribe |
Nov 22nd 2006 1 decade ago |
Sign Up for Free or Log In to start participating in the conversation!