CVE-2008-3175

high · 10

Integer underflow in rxRPC.dll in the LGServer service in the server in CA ARCserve Backup for Laptops and Desktops 11.0 through 11.5 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted message that triggers a buffer overflow.

CVSS

14.4%

EPSS (exploit prob.)

96th

EPSS percentile

2008-08-01

Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

CWE-189

Affected products

Vendor	Product	Affected versions
broadcom	brightstor_arcserve_backup	11.1
broadcom	brightstor_arcserve_backup	11.5
broadcom	desktop_management_suite	11.1
broadcom	desktop_management_suite	11.2
ca	arcserve_backup_for_laptops_and_desktops	11.0
ca	arcserve_backup_for_laptops_and_desktops	11.1
ca	arcserve_backup_for_laptops_and_desktops	11.1
ca	arcserve_backup_for_laptops_and_desktops	11.1
ca	arcserve_backup_for_laptops_and_desktops	11.5
ca	brightstor_arcserve_backup	11.0
ca	brightstor_arcserve_backup	11.1
ca	brightstor_arcserve_backup	11.1
ca	protection_suites	2
ca	protection_suites	3.0
ca	protection_suites	3.1

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2008-3175