TITLE:
CA DM Deployment Common Component Denial of Service

SECUNIA ADVISORY ID:
SA18531

VERIFY ADVISORY:
http://secunia.com/advisories/18531/

CRITICAL:
Less critical

IMPACT:
DoS

WHERE:
>From local network

SOFTWARE:
CA Unicenter Remote Control 6.x
http://secunia.com/product/2622/
CA Server Protection Suite r2
http://secunia.com/product/6873/
CA Desktop Protection Suite r2
http://secunia.com/product/6872/
CA Business Protection Suite r2
http://secunia.com/product/6874/
CA Business Protection Suite for Midsize Business for Windows r2
http://secunia.com/product/6877/
CA Business Protection Suite for Microsoft Small Business Server
Standard Edition r2
http://secunia.com/product/6876/
CA Business Protection Suite for Microsoft Small Business Server
Premium Edition r2
http://secunia.com/product/6875/
BrightStor ARCserve Backup for Laptops & Desktops 11.x
http://secunia.com/product/5906/

DESCRIPTION:
Two vulnerabilities have been reported in various CA products, which
can be exploited by malicious people to cause a DoS (Denial of
Service).

1) The DM Primer (DMPrimer) service fails to handle the WSAEMESGSIZE
error condition when an overly large UDP packet is received. This can
be exploited to cause the service to stop responding.

2) An error in DM Primer in the handling of certain unrecognized
network messages can be exploited to cause high CPU utilisation and
excessive growth of the DM Primer log file.

The vulnerabilities have been reported in DM Primer version 1.4.154
and 1.4.155 distributed with following products:
* BrightStor Mobile Backup r4.0
* BrightStor ARCserve Backup for Laptops & Desktops r11.0, r11.1,
r11.1 SP1
* Unicenter Remote Control 6.0, 6.0 SP1
* CA Desktop Protection Suite r2
* CA Server Protection Suite r2
* CA Business Protection Suite r2
* CA Business Protection Suite for Microsoft Small Business Server
Standard Edition r2
* CA Business Protection Suite for Microsoft Small Business Server
Premium Edition r2
* CA Business Protection Suite for Midsize Business for Windows r2

SOLUTION:
The vendor recommends uninstalling the DM Primer service since it is
only utilised for the initial installation of the products. See
vendor's original advisory for instructions.

PROVIDED AND/OR DISCOVERED BY:
Cengiz Aykanat and Karma

ORIGINAL ADVISORY:
Computer Associates:
http://supportconnectw.ca.com/public/ca_common_docs/dmdeploysecurity_notice.asp

Design Folks:
http://www.designfolks.com.au/karma/DMPrimer/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------