CVE-2008-3175

Integer underflow in rxRPC.dll in the LGServer service in the server in CA ARCserve Backup for Laptops and Desktops 11.0 through 11.5 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted message that triggers a buffer overflow.

CVSS v2.0 10.0 HIGH

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=181721	Patch Vendor Advisory
http://www.securityfocus.com/bid/30472	Patch
http://www.securitytracker.com/id?1020590
http://lists.grok.org.uk/pipermail/full-disclosure/2008-July/063594.html
http://secunia.com/advisories/31319	Vendor Advisory
http://www.vupen.com/english/advisories/2008/2286	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/44137
http://www.securityfocus.com/archive/1/495020/100/0/threaded

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ca:arcserve_backup_for_laptops_and_desktops:11.1:::::::*
	cpe:2.3:a:ca:arcserve_backup_for_laptops_and_desktops:11.1::sp1:::::
	cpe:2.3:a:broadcom:desktop_management_suite:11.1:::::::*
	cpe:2.3:a:broadcom:desktop_management_suite:11.2:::::::*
	cpe:2.3:a:ca:arcserve_backup_for_laptops_and_desktops:11.0:::::::*
	cpe:2.3:a:ca:brightstor_arcserve_backup:11.1::sp2:::::
	cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.5:::::::*
	cpe:2.3:a:ca:brightstor_arcserve_backup:11.0:::::::*
	cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1:::::::*
	cpe:2.3:a:ca:brightstor_arcserve_backup:11.1::sp1:::::
	cpe:2.3:a:ca:protection_suites:3.1:::::::*
	cpe:2.3:a:ca:arcserve_backup_for_laptops_and_desktops:11.1::sp2:::::
	cpe:2.3:a:ca:arcserve_backup_for_laptops_and_desktops:11.5:::::::*
	cpe:2.3:a:ca:protection_suites:2:::::::*
	cpe:2.3:a:ca:protection_suites:3.0:::::::*

Information

Published : 2008-08-01 14:41

Updated : 2021-04-08 13:31

NVD link : CVE-2008-3175

Mitre link : CVE-2008-3175

JSON object : View

Products Affected

broadcom

desktop_management_suite
brightstor_arcserve_backup

ca

brightstor_arcserve_backup
arcserve_backup_for_laptops_and_desktops
protection_suites

CWE

CWE-189

Numeric Errors

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=181721", "name": "https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=181721", "tags": ["Patch", "Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://www.securityfocus.com/bid/30472", "name": "30472", "tags": ["Patch"], "refsource": "BID"}, {"url": "http://www.securitytracker.com/id?1020590", "name": "1020590", "tags": [], "refsource": "SECTRACK"}, {"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2008-July/063594.html", "name": "20080731 Assurent VR - CA ARCserve Backup for Laptops and Desktops LGServer Handshake Buffer Overflow", "tags": [], "refsource": "FULLDISC"}, {"url": "http://secunia.com/advisories/31319", "name": "31319", "tags": ["Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://www.vupen.com/english/advisories/2008/2286", "name": "ADV-2008-2286", "tags": ["Vendor Advisory"], "refsource": "VUPEN"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44137", "name": "ca-abld-rxrpc-bo(44137)", "tags": [], "refsource": "XF"}, {"url": "http://www.securityfocus.com/archive/1/495020/100/0/threaded", "name": "20080801 CA ARCserve Backup for Laptops and Desktops Server LGServer Service Vulnerability", "tags": [], "refsource": "BUGTRAQ"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Integer underflow in rxRPC.dll in the LGServer service in the server in CA ARCserve Backup for Laptops and Desktops 11.0 through 11.5 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted message that triggers a buffer overflow."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-189"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2008-3175", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "severity": "HIGH", "acInsufInfo": true, "impactScore": 10.0, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2008-08-01T14:41Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:ca:arcserve_backup_for_laptops_and_desktops:11.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:ca:arcserve_backup_for_laptops_and_desktops:11.1:*:sp1:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:broadcom:desktop_management_suite:11.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:broadcom:desktop_management_suite:11.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:ca:arcserve_backup_for_laptops_and_desktops:11.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:ca:brightstor_arcserve_backup:11.1:*:sp2:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.5:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:ca:brightstor_arcserve_backup:11.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:ca:brightstor_arcserve_backup:11.1:*:sp1:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:ca:protection_suites:3.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:ca:arcserve_backup_for_laptops_and_desktops:11.1:*:sp2:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:ca:arcserve_backup_for_laptops_and_desktops:11.5:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:ca:protection_suites:2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:ca:protection_suites:3.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2021-04-08T13:31Z"}