PT-2012-3426 · Ca · Ca Arcserve Backup

Published 2012-03-21 · Updated 2021-04-07 · CVE-2012-1662

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions CA ARCserve Backup versions r12.0 through r12.0 SP2 CA ARCserve Backup versions r12.5 before SP2 CA ARCserve Backup versions r15 through r15 SP1 CA ARCserve Backup versions r16 before SP1

Description The issue allows remote attackers to cause a denial of service, resulting in service shutdown, via a crafted network request.

Recommendations For CA ARCserve Backup versions r12.0 through r12.0 SP2, update to a version after SP2 to resolve the issue. For CA ARCserve Backup versions r12.5 before SP2, update to SP2 or later to resolve the issue. For CA ARCserve Backup versions r15 through r15 SP1, update to a version after SP1 to resolve the issue. For CA ARCserve Backup versions r16 before SP1, update to SP1 or later to resolve the issue.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2012-1662

Affected Products

Ca Arcserve Backup

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2012-1662 · Security Note
• https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7b983E3A52-8374-410A-82BD-B8788733C70F%7d · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74175 · Note
• http://secunia.com/advisories/48459 · Note
• http://securitytracker.com/id?1026832 · Note
• http://securityfocus.com/bid/52655 · Note
• http://archives.neohapsis.com/archives/bugtraq/2012-03/0109.html · Note
• http://osvdb.org/80212 · Note