5

CVE-2009-1761

Exploit
The message engine in CA ARCserve Backup r12.0 and r12.0 SP1 for Windows allows remote attackers to cause a denial of service (crash) via (1) an invalid 0x13 message, which is not properly handled in the ASCORE module, or (2) a 0x3B message with invalid stub data that triggers an RPC marshalling error.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ca ≫ Arcserve Backup Versionr12.0 Editionwindows
Ca ≫ Arcserve Backup Versionr12.0 Updatesp1 Editionwindows
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.23% 0.805
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://community.ca.com/blogs/casecurityresponseblog/archive/2009/06/15/ca20090615-01-ca-arcserve-backup-message-engine-denial-of-service-vulnerabilities.aspx
Patch
http://secunia.com/advisories/35473
Vendor Advisory
http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=209502
Patch
Vendor Advisory
http://www.ivizsecurity.com/security-advisory-iviz-sr-09003.html
Exploit
http://www.ivizsecurity.com/security-advisory-iviz-sr-09004.html
Exploit
http://www.securityfocus.com/archive/1/504348/100/0/threaded
http://www.securityfocus.com/archive/1/504349/100/0/threaded
http://www.securityfocus.com/bid/35396
http://www.securitytracker.com/id?1022405
http://www.vupen.com/english/advisories/2009/1608
https://exchange.xforce.ibmcloud.com/vulnerabilities/51169