Description
The message engine in CA ARCserve Backup r12.0 and r12.0 SP1 for Windows allows remote attackers to cause a denial of service (crash) via (1) an invalid 0x13 message, which is not properly handled in the ASCORE module, or (2) a 0x3B message with invalid stub data that triggers an RPC marshalling error.
References
- 20090616 CA20090615-01: CA ARCserve Backup Message Engine Denial of Service Vulnerabilities mailing-list
- http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=209502
- http://www.ivizsecurity.com/security-advisory-iviz-sr-09004.html
- http://community.ca.com/blogs/casecurityresponseblog/archive/2009/06/15/ca20090615-01-ca-arcserve-backup-message-engine-denial-of-service-vulnerabilities.aspx
- 20090616 CA20090615-01: CA ARCserve Backup Message Engine Denial of Service Vulnerabilities (Updated) mailing-list
- 35473 third-party-advisory
- 35396 vdb-entry
- http://www.ivizsecurity.com/security-advisory-iviz-sr-09003.html
- ADV-2009-1608 vdb-entry
- ca-arcserve-ascore-dos(51169) vdb-entry
- 1022405 vdb-entry