Unscored severity · published Aug 1, 2008
CVE-2008-3175
Integer underflow in rxRPC.dll in the LGServer service in the server in CA ARCserve Backup for Laptops and Desktops 11.0 through 11.5 allows remote attackers to execute arbitrary…
–
CVSS
14.4%
EPSS
No
On KEV
Description
Integer underflow in rxRPC.dll in the LGServer service in the server in CA ARCserve Backup for Laptops and Desktops 11.0 through 11.5 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted message that triggers a buffer overflow.
Exploitation
Is it being used?
Exploit prediction (EPSS)14.4% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AB
Arcserve Backup For Laptops And Desktops · CA
11.0; 11.1; 11.1; 11.1; 11.5 · source: NVD
BA
Brightstor Arcserve Backup · Broadcom
11.1; 11.5 · source: NVD
DM
Desktop Management Suite · Broadcom
11.1; 11.2 · source: NVD
PS
Protection Suites · CA
2; 3.0; 3.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-3175
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-3175
lists.grok.org.uk
http://lists.grok.org.uk/pipermail/full-disclosure/2008-July/063594.html
Vendor Advisory
http://secunia.com/advisories/31319
www.securityfocus.com
http://www.securityfocus.com/archive/1/495020/100/0/threaded
Patch
http://www.securityfocus.com/bid/30472
www.securitytracker.com
http://www.securitytracker.com/id?1020590
Vendor Advisory
http://www.vupen.com/english/advisories/2008/2286
More from Brightstor Arcserve Backup
–
CVE-2008-2241
Directory traversal vulnerability in caloggerd in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allows remote attackers to append arbitrary data to arbitrary files via…
–
CVE-2008-2242
Multiple buffer overflows in xdr functions in the server in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allow remote attackers to execute arbitrary code, as demonstrated by…
–
CVE-2008-1979
The Discovery Service (casdscvc) in CA ARCserve Backup 12.0.5454.0 and earlier allows remote attackers to cause a denial of service (crash) via a packet with a large integer value…
–
CVE-2007-4620
Multiple stack-based buffer overflows in Computer Associates (CA) Alert Notification Service (Alert.exe) 8.1.586.0, 8.0.450.0, and 7.1.758.0, as used in multiple CA products…
–
CVE-2007-5328
The Message Engine RPC service in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows attackers to execute arbitrary code by using certain…