PT-2006-1380 · Ca · Dm Deployment Common+6

Published 2006-01-19 · Updated 2021-04-13 · CVE-2006-0307

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions CA BrightStor Mobile Backup version r4.0 CA BrightStor ARCserve Backup for Laptops & Desktops versions r11.0 through r11.1 SP1 CA Unicenter Remote Control versions 6.0 through 6.0 SP1 CA Desktop Protection Suite version r2 CA Server Protection Suite version r2 CA Business Protection Suite version r2

Description The issue allows remote attackers to cause a denial of service, resulting in CPU consumption and log file consumption, via unspecified unrecognized network messages that are not properly handled by the DM Primer in the DM Deployment Common Component.

Recommendations For CA BrightStor Mobile Backup version r4.0, update to a version that properly handles unrecognized network messages. For CA BrightStor ARCserve Backup for Laptops & Desktops versions r11.0 through r11.1 SP1, update to a version that properly handles unrecognized network messages. For CA Unicenter Remote Control versions 6.0 through 6.0 SP1, update to a version that properly handles unrecognized network messages. For CA Desktop Protection Suite version r2, update to a version that properly handles unrecognized network messages. For CA Server Protection Suite version r2, update to a version that properly handles unrecognized network messages. For CA Business Protection Suite version r2, update to a version that properly handles unrecognized network messages.

Exploit

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2006-0307

Affected Products

Ca Brightstor Arcserve Backup For Laptops/Desktops

Ca Brightstor Mobile Backup

Ca Business Protection Suite

Ca Desktop Protection Suite

Ca Server Protection Suite

Ca Unicenter Remote Control

Dm Deployment Common

References · 9

• 🔥 http://securityfocus.com/bid/16276 · Exploit
• http://securitytracker.com/id?1015504 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-0307 · Security Note
• http://supportconnectw.ca.com/public/ca_common_docs/dmdeploysecurity_notice.asp · Vendor Advisory
• http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33756 · Vendor Advisory
• http://secunia.com/advisories/18531 · Vendor Advisory
• http://vupen.com/english/advisories/2006/0236 · Vendor Advisory
• http://osvdb.org/22529 · Note
• http://securityfocus.com/archive/1/422381/100/0/threaded · Note