CA ARCserve Backup for Laptops and Desktops Server, CA Protection Suite, and CA Desktop Management Suite Integer Underflow

critical Nessus Plugin ID 69316

Language:

Synopsis

The remote host has software installed that is affected by an integer underflow vulnerability.

Description

According to the version of rxRPC.dll installed on the remote host, the Computer Associates product is affected by an integer underflow vulnerability that could allow a remote attacker to cause the LGServer service to crash or execute arbitrary code.

Solution

Apply the appropriate patch per the vendor's advisory.

Plugin Details

Severity: Critical

ID: 69316

File Name: ca_babld_lgserver_rce.nasl

Version: 1.5

Type: local

Agent: windows

Family: Windows

Published: 8/13/2013

Updated: 6/27/2018

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 7.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: cpe:/a:ca:arcserve_backup_for_laptops_and_desktops, cpe:/a:ca:brightstor_arcserve_backup_laptops_desktops, cpe:/a:ca:desktop_management_suite, cpe:/a:ca:protection_suites

Required KB Items: SMB/Registry/Enumerated

Exploit Ease: No known exploits are available

Patch Publication Date: 7/31/2008

Vulnerability Publication Date: 7/31/2008

Reference Information

CVE: CVE-2008-3175

BID: 30472

CWE: 189

Detections

Analytics