PT-2008-2919 · Ca · Ca Arcserve Backup For Laptops/Desktops+1

Dyon Balding · Publicado 2008-04-07 · Atualizado 2021-04-08 · CVE-2008-1328

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CA ARCserve Backup for Laptops and Desktops versions r11.0 through r11.5 CA ARCserve Backup Suite versions 11.1 and 11.2

Description The issue is related to a buffer overflow in the LGServer service, which allows remote attackers to execute arbitrary code via unspecified command arguments.

Recommendations For CA ARCserve Backup for Laptops and Desktops versions r11.0 through r11.5, update to a version outside of this range to resolve the issue. For CA ARCserve Backup Suite versions 11.1 and 11.2, update to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting access to the LGServer service until a patch is available.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2008-1328

Produtos afetados

Ca Arcserve Backup Suite

Ca Arcserve Backup For Laptops/Desktops

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2008-1328 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41641 · Nota
• https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=173105 · Aviso do Fabricante
• http://securityfocus.com/bid/28616 · Nota
• http://vupen.com/english/advisories/2008/1104/references · Nota
• http://securityreason.com/securityalert/3800 · Nota
• http://securitytracker.com/id?1019788 · Nota
• http://securityfocus.com/archive/1/490463/100/0/threaded · Nota