ARCserveIT Backup Account Password Disclosure 3

[epohl]

A file sharing security vulnerability has been found in Computer Associates' ARCserveIT for Windows NT and 2000 that allows users to access a file that stores the Backup Account in plain text. The following article describes the vulnerability.

http://www.securiteam.com/windowsntfocus/6X0090K2UG.html

 

[monkeylizard]

Since there's no fix for AS 6.61, I'm going to remove the Everyone Group from accessing the ARCSERVE$ share. I'll let you all know if my backups still function. My Backup account is a Domain Admin which still has FULL access... Monkeylizard
-Isaiah 35-