CVE-2008-3175

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2008-3175
Integer underflow in rxRPC.dll in the LGServer service in the server in CA ARCserve Backup for Laptops and Desktops 11.0 through 11.5 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted message that triggers a buffer overflow.

10.0 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://lists.grok.org.uk/pipermail/full-disclosure/2008-July/063594.html
http://secunia.com/advisories/31319 Vendor Advisory
http://www.securityfocus.com/archive/1/495020/100/0/threaded
http://www.securityfocus.com/bid/30472 Patch
http://www.securitytracker.com/id?1020590
http://www.vupen.com/english/advisories/2008/2286 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/44137
https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=181721 Patch Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.5:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:desktop_management_suite:11.1:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:desktop_management_suite:11.2:*:*:*:*:*:*:*
cpe:2.3:a:ca:arcserve_backup_for_laptops_and_desktops:11.0:*:*:*:*:*:*:*
cpe:2.3:a:ca:arcserve_backup_for_laptops_and_desktops:11.1:*:*:*:*:*:*:*
cpe:2.3:a:ca:arcserve_backup_for_laptops_and_desktops:11.1:*:sp1:*:*:*:*:*
cpe:2.3:a:ca:arcserve_backup_for_laptops_and_desktops:11.1:*:sp2:*:*:*:*:*
cpe:2.3:a:ca:arcserve_backup_for_laptops_and_desktops:11.5:*:*:*:*:*:*:*
cpe:2.3:a:ca:brightstor_arcserve_backup:11.0:*:*:*:*:*:*:*
cpe:2.3:a:ca:brightstor_arcserve_backup:11.1:*:sp1:*:*:*:*:*
cpe:2.3:a:ca:brightstor_arcserve_backup:11.1:*:sp2:*:*:*:*:*
cpe:2.3:a:ca:protection_suites:2:*:*:*:*:*:*:*
cpe:2.3:a:ca:protection_suites:3.0:*:*:*:*:*:*:*
cpe:2.3:a:ca:protection_suites:3.1:*:*:*:*:*:*:*
History

08 Apr 2021, 13:31

Type Values Removed Values Added
CPE cpe:2.3:a:ca:desktop_management_suite:11.2:*:*:*:*:*:*:*
cpe:2.3:a:ca:desktop_management_suite:11.1:*:*:*:*:*:*:*		 cpe:2.3:a:broadcom:desktop_management_suite:11.1:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:desktop_management_suite:11.2:*:*:*:*:*:*:*

07 Apr 2021, 18:14

Type Values Removed Values Added
CPE cpe:2.3:a:ca:brightstor_arcserve_backup:11.1:*:*:*:*:*:*:*
cpe:2.3:a:ca:brightstor_arcserve_backup:11.5:*:*:*:*:*:*:*		 cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.5:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1:*:*:*:*:*:*:*
Information

Published : 2008-08-01 14:41

Updated : 2023-12-10 10:51

NVD link : CVE-2008-3175

Mitre link : CVE-2008-3175

CVE.ORG link : CVE-2008-3175

JSON object : View

Products Affected

broadcom

  • desktop_management_suite
  • brightstor_arcserve_backup

ca

  • brightstor_arcserve_backup
  • protection_suites
  • arcserve_backup_for_laptops_and_desktops
CWE
CWE-189

Numeric Errors