CVE-2008-1786 The DSM gui_cm_ctrls ActiveX control (gui_cm_ctrls.ocx), as used in multiple CA products including BrightStor ARCServe Backup for Laptops and Desktops r11.5, Desktop Management Suite r11.1 through r11...
HighCVSS 9.3
EPSS 6.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The DSM gui_cm_ctrls ActiveX control (gui_cm_ctrls.ocx), as used in multiple CA products including BrightStor ARCServe Backup for Laptops and Desktops r11.5, Desktop Management Suite r11.1 through r11.2 C2; Unicenter r11.1 through r11.2 C2; and Desktop and Server Management r11.1 through r11.2 C2 allows remote attackers to execute arbitrary code via crafted function arguments.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| computer associates arcserve backup laptops and desktops | = r11.5 | No fix listed |
| computer associates desktop and server management | = r11.1 | No fix listed |
| computer associates desktop and server management | = r11.2 | No fix listed |
| computer associates desktop and server management | = r11.2a | No fix listed |
| computer associates desktop and server management | = r11.2c1 | No fix listed |
| computer associates desktop and server management | = r11.2c2 | No fix listed |
| computer associates desktop management suite | = r11.2 | No fix listed |
| computer associates desktop management suite | = r11.2a | No fix listed |
| computer associates desktop management suite | = r11.2c1 | No fix listed |
| computer associates desktop management suite | = r11.2c2 | No fix listed |
| computer associates unicenter asset management | = r11.1 | No fix listed |
| computer associates unicenter asset management | = r11.2 | No fix listed |
| computer associates unicenter asset management | = r11.2a | No fix listed |
| computer associates unicenter asset management | = r11.2c1 | No fix listed |
| computer associates unicenter asset management | = r11.2c2 | No fix listed |
| computer associates unicenter desktop management bundle | = r11.1 | No fix listed |
| computer associates unicenter desktop management bundle | = r11.2 | No fix listed |
| computer associates unicenter desktop management bundle | = r11.2a | No fix listed |
| computer associates unicenter desktop management bundle | = r11.2c1 | No fix listed |
| computer associates unicenter desktop management bundle | = r11.2c2 | No fix listed |
| computer associates unicenter remote control | = r11.1 | No fix listed |
| computer associates unicenter remote control | = r11.2 | No fix listed |
| computer associates unicenter remote control | = r11.2a | No fix listed |
| computer associates unicenter remote control | = r11.2c1 | No fix listed |
| computer associates unicenter remote control | = r11.2c2 | No fix listed |
Show 5 more
| Product | Affected versions | Fixed in |
|---|---|---|
| computer associates unicenter software delivery | = r11.1 | No fix listed |
| computer associates unicenter software delivery | = r11.2 | No fix listed |
| computer associates unicenter software delivery | = r11.2a | No fix listed |
| computer associates unicenter software delivery | = r11.2c1 | No fix listed |
| computer associates unicenter software delivery | = r11.2c2 | No fix listed |
References
- community.ca.com patch vendor-advisory
- 29837 third-party-advisory vendor-advisory
- VU#684883 third-party-advisory us-government-resource
- 20080416 CA DSM gui_cm_ctrls ActiveX Control Vulnerability mailing-list
- 28809 patch vdb-entry
- 1019872 vdb-entry
- ADV-2008-1249 vdb-entry vendor-advisory
- ca-dsmguicmctrls-code-execution(41853) vdb-entry
- support.ca.com patch vendor-advisory