PT-2008-2919 · Ca · Ca Arcserve Backup For Laptops/Desktops+1

Dyon Balding · Published 2008-04-07 · Updated 2021-04-08 · CVE-2008-1328

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CA ARCserve Backup for Laptops and Desktops versions r11.0 through r11.5 CA ARCserve Backup Suite versions 11.1 and 11.2

Description The issue is related to a buffer overflow in the LGServer service, which allows remote attackers to execute arbitrary code via unspecified command arguments.

Recommendations For CA ARCserve Backup for Laptops and Desktops versions r11.0 through r11.5, update to a version outside of this range to resolve the issue. For CA ARCserve Backup Suite versions 11.1 and 11.2, update to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting access to the LGServer service until a patch is available.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2008-1328

Affected Products

Ca Arcserve Backup Suite

Ca Arcserve Backup For Laptops/Desktops

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2008-1328 · Security Note
• https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=173105 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41641 · Note
• http://securityfocus.com/bid/28616 · Note
• http://vupen.com/english/advisories/2008/1104/references · Note
• http://securityreason.com/securityalert/3800 · Note
• http://securitytracker.com/id?1019788 · Note
• http://securityfocus.com/archive/1/490463/100/0/threaded · Note