Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2010-3984

Buffer overflow in mng_core_com.dll in CA XOsoft Replication r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft High Availability r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft Content Distribution r12.0 SP1 and r12.5 SP2 rollup, and CA ARCserve Replication and High Availability (RHA) r15.0 SP1 allows remote attackers to execute arbitrary code via a crafted create_session_bab operation in a SOAP request to xosoapapi.asmx.

Published

2011-01-07T23:00:19.063

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

10.0

Impact Score

6.4

Weaknesses

Type: Primary
CWE-119

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	ca	arcserve_replication_and_high_availability	r15.0	Yes
Application	ca	xosoft_content_distribution	r12.0	Yes
Application	ca	xosoft_content_distribution	r12.5	Yes
Application	ca	xosoft_high_availability	r12.0	Yes
Application	ca	xosoft_high_availability	r12.5	Yes
Application	ca	xosoft_replication	r12.0	Yes
Application	ca	xosoft_replication	r12.5	Yes

References

http://secunia.com/advisories/42561 Vendor Advisory ([email protected])
http://www.securityfocus.com/archive/1/515115/100/0/threaded ([email protected])
http://www.securityfocus.com/bid/45317 ([email protected])
http://www.securitytracker.com/id?1024852 ([email protected])
http://www.zerodayinitiative.com/advisories/ZDI-10-263/ ([email protected])
https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7bFEB41CE8-5023-46DF-B257-5299F492BF23%7d Vendor Advisory ([email protected])
http://secunia.com/advisories/42561 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/515115/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/45317 (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id?1024852 (af854a3a-2127-422b-91ae-364da2661108)
http://www.zerodayinitiative.com/advisories/ZDI-10-263/ (af854a3a-2127-422b-91ae-364da2661108)
https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7bFEB41CE8-5023-46DF-B257-5299F492BF23%7d Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)