Security Notice for
CA ARCserve Backup Mediasvr.exe Vulnerability

Last Updated: April 02, 2007

CA is aware that functional exploit code was publicized on March 30, 2007 for a CA ARCserve Backup Mediasvr.exe vulnerability.

We have verified that a high risk vulnerability does exist and we are now working on a patch to address the issue.

CA recommends that CA ARCserve Backup users implement the following temporary workaround to mitigate the vulnerability:

1. Rename the "mediasvr.exe" file to a non-functional file name,
   such as "mediasvc.exe.disable".
2. Then restart the CA BrightStor Tape Engine service.

This will disable the command line functionality in the product (i.e. command line utilities such as ca_backup, ca_restore, ca_merge, ca_qmgr, ca_scan, etc will not work).

After we have completed our analysis of the issue, we will post an update and patches on the CA SupportConnect website. If additional information is required, please contact CA Technical Support at http://supportconnect.ca.com.

If you discover a vulnerability in CA products, please report your findings to vuln at ca.com, or utilize our "Submit a Vulnerability" form at http://www3.ca.com/securityadvisor/vulninfo/submit.aspx.

CVE Reference: CVE-2007-1785
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1785.