CVE-2008-3175 Integer underflow in rxRPC.dll in the LGServer service in the server in CA ARCserve Backup for Laptops and Desktops 11.0 through 11.5 allows remote attackers to execute arbitrary code or cause a denia...
HighCVSS 10.0
EPSS 14.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer underflow in rxRPC.dll in the LGServer service in the server in CA ARCserve Backup for Laptops and Desktops 11.0 through 11.5 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted message that triggers a buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom brightstor arcserve backup | = 11.1 | No fix listed |
| broadcom brightstor arcserve backup | = 11.5 | No fix listed |
| broadcom desktop management suite | = 11.1 | No fix listed |
| broadcom desktop management suite | = 11.2 | No fix listed |
| ca arcserve backup for laptops and desktops | = 11.0 | No fix listed |
| ca arcserve backup for laptops and desktops | = 11.1 | No fix listed |
| ca arcserve backup for laptops and desktops | = 11.5 | No fix listed |
| ca brightstor arcserve backup | = 11.0 | No fix listed |
| ca brightstor arcserve backup | = 11.1 | No fix listed |
| ca protection suites | = 2 | No fix listed |
| ca protection suites | = 3.0 | No fix listed |
| ca protection suites | = 3.1 | No fix listed |
References
- 20080731 Assurent VR - CA ARCserve Backup for Laptops and Desktops LGServer Handshake Buffer Overflow mailing-list
- 31319 third-party-advisory vendor-advisory
- 20080801 CA ARCserve Backup for Laptops and Desktops Server LGServer Service Vulnerability mailing-list
- 30472 patch vdb-entry
- 1020590 vdb-entry
- ADV-2008-2286 vdb-entry vendor-advisory
- ca-abld-rxrpc-bo(44137) vdb-entry
- support.ca.com patch vendor-advisory