Description
The message engine in CA ARCserve Backup r12.0 and r12.0 SP1 for Windows allows remote attackers to cause a denial of service (crash) via (1) an invalid 0x13 message, which is not properly handled in the ASCORE module, or (2) a 0x3B message with invalid stub data that triggers an RPC marshalling error.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.securityfocus.com/archive/1/504348/100/0/threaded ↗
- http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=209502 ↗
- http://www.ivizsecurity.com/security-advisory-iviz-sr-09004.html ↗
- http://community.ca.com/blogs/casecurityresponseblog/archive/2009/06/15/ca20090615-01-ca-arcserve-backup-message-engine-denial-of-service-vulnerabilities.aspx ↗
- http://www.securityfocus.com/archive/1/504349/100/0/threaded ↗
- http://secunia.com/advisories/35473 ↗
- http://www.securityfocus.com/bid/35396 ↗
- http://www.ivizsecurity.com/security-advisory-iviz-sr-09003.html ↗
- http://www.vupen.com/english/advisories/2009/1608 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51169 ↗
- http://www.securitytracker.com/id?1022405 ↗