Unscored severity · published Jan 7, 2011
CVE-2010-3984
Buffer overflow in mng_core_com.dll in CA XOsoft Replication r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft High Availability r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft Content…
–
CVSS
5.3%
EPSS
No
On KEV
Description
Buffer overflow in mng_core_com.dll in CA XOsoft Replication r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft High Availability r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft Content Distribution r12.0 SP1 and r12.5 SP2 rollup, and CA ARCserve Replication and High Availability (RHA) r15.0 SP1 allows remote attackers to execute arbitrary code via a crafted create_session_bab operation in a SOAP request to xosoapapi.asmx.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.3% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AR
Arcserve Replication And High Availability · CA
r15.0 · source: NVD
XC
Xosoft Content Distribution · CA
r12.0; r12.5 · source: NVD
XH
Xosoft High Availability · CA
r12.0; r12.5 · source: NVD
XR
Xosoft Replication · CA
r12.0; r12.5 · source: NVD
Affected product
AR
Arcserve Replication And High Availability
CA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-3984
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-3984
Vendor Advisory
http://secunia.com/advisories/42561
www.securityfocus.com
http://www.securityfocus.com/archive/1/515115/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/45317
www.securitytracker.com
http://www.securitytracker.com/id?1024852
www.zerodayinitiative.com
http://www.zerodayinitiative.com/advisories/ZDI-10-263/
Vendor Advisory
https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7bFEB41CE8-5023-46DF-B257-5299F492BF23%7d