{"id": "SECURITYVULNS:DOC:20063", "bulletinFamily": "software", "title": "CA ARCserve Backup Discovery Service Denial of Service Vulnerability", "description": "\r\nTitle: CA ARCserve Backup Discovery Service Denial of Service \r\nVulnerability\r\n\r\n\r\nCA Advisory Date: 2008-06-17\r\n\r\n\r\nReported By: Luigi Auriemma\r\n\r\n\r\nImpact: A remote attacker can cause a denial of service.\r\n\r\n\r\nSummary: CA ARCserve Backup contains a vulnerability in the \r\nDiscovery service (casdscsvc) that can allow a remote attacker to \r\ncause a denial of service condition. CA has issued patches to \r\naddress the vulnerability. The vulnerability, CVE-2008-1979, \r\noccurs due to insufficient verification of client data. An \r\nattacker can make a request that can crash the service.\r\n\r\n\r\nMitigating Factors: None\r\n\r\n\r\nSeverity: CA has given this vulnerability a Medium risk rating.\r\n\r\n\r\nAffected Products:\r\nCA ARCserve Backup r12.0 Windows\r\nCA ARCserve Backup r11.5 Windows SP3 and prior*\r\nCA ARCserve Backup r11.1 Windows*\r\nCA ARCserve Backup r11.1 Netware*\r\nCA Server Protection Suite r2\r\nCA Business Protection Suite r2\r\nCA Business Protection Suite for Microsoft Small Business Server \r\n Standard Edition r2\r\nCA Business Protection Suite for Microsoft Small Business Server \r\n Premium Edition r2\r\n\r\n*Formerly known as BrightStor ARCserve Backup\r\n\r\n\r\nNon-affected Products:\r\nCA ARCserve Backup r11.5 Windows SP4\r\n\r\n\r\nAffected Platforms:\r\nWindows and Netware\r\n\r\n\r\nStatus and Recommendation:\r\nCA has issued the following patches to address the \r\nvulnerabilities. \r\nCA ARCserve Backup r12.0 Windows: QO99574\r\nCA ARCserve Backup r11.5 Windows: QO99575\r\nFor CA ARCserve Backup r11.5 Windows, the issue can also be \r\naddressed by applying 11.5 SP4: QO99129\r\nCA ARCserve Backup r11.1 Windows: QO99576\r\nCA ARCserve Backup r11.1 Netware: QO99579\r\nCA Protection Suites r2: QO99575\r\n\r\n\r\nHow to determine if you are affected:\r\n\r\nCA ARCserve Backup r12.0 Windows:\r\n\r\n1. Run the ARCserve Patch Management utility. From the Windows \r\n Start menu, it can be found under Programs->CA->ARCserve Patch \r\n Management->Patch Status.\r\n2. The main patch status screen will indicate if patch \u201cQO99574\u201d \r\n is currently applied. If the patch is not applied, the \r\n installation is vulnerable.\r\n\r\nFor more information on the ARCserve Patch Management utility, \r\nread document TEC446265.\r\n\r\nAlternatively, use the file information below to determine if the \r\nproduct installation is vulnerable.\r\n\r\nCA ARCserve Backup r12.0 Windows,\r\nCA ARCserve Backup r11.5 Windows,\r\nCA ARCserve Backup r11.1 Windows,\r\nCA ARCserve Backup r11.1 Netware,\r\nCA Protection Suites r2*:\r\n\r\n1. Using Windows Explorer, locate the file \u201casbrdcst.dll\u201d. By \r\n default, the file is located in the \r\n \u201cC:\Program Files\CA\SharedComponents\ARCserve Backup\CADS\u201d \r\n directory on 32 bit systems and \u201cC:\Program Files (x86)\CA\\r\n SharedComponents\ARCserve Backup\CADS\u201d on 64 bit systems.\r\n2. Right click on the file and select Properties.\r\n3. Select the General tab.\r\n4. If the file timestamp is earlier than indicated in the below \r\n table, the installation is vulnerable.\r\n\r\n* For Protection Suites r2, use the file timestamp for CA ARCserve \r\n Backup r11.5 English\r\n\r\nProduct Ver Product Lang File Name File Sz Timestamp\r\n (bytes)\r\n12.0 Windows English asbrdcst.dll 324872 05/01/2008 12:11\r\n12.0 Windows Spanish asbrdcst.dll 324872 05/01/2008 12:11\r\n12.0 Windows Port-Braz asbrdcst.dll 320776 05/01/2008 12:11\r\n12.0 Windows Japanese asbrdcst.dll 320776 05/01/2008 12:11\r\n12.0 Windows Italian asbrdcst.dll 324872 05/01/2008 12:11\r\n12.0 Windows German asbrdcst.dll 324872 05/01/2008 12:11\r\n12.0 Windows French asbrdcst.dll 324872 05/01/2008 12:11\r\n12.0 Windows Trad Chinese asbrdcst.dll 316680 05/01/2008 12:11\r\n12.0 Windows Simp Chinese asbrdcst.dll 316680 05/01/2008 12:11\r\n11.5 Windows English asbrdcst.dll 212992 04/22/2008 10:15:02\r\n11.5 Windows Japanese asbrdcst.dll 208896 04/22/2008 14:28:52\r\n11.5 Windows Simp Chinese asbrdcst.dll 204800 04/22/2008 14:30:54\r\n11.5 Windows Trad Chinese asbrdcst.dll 204800 04/22/2008 14:33:28\r\n11.5 Windows Italian asbrdcst.dll 212992 04/22/2008 14:31:46\r\n11.5 Windows Port-Braz asbrdcst.dll 212992 04/22/2008 14:53:54\r\n11.5 Windows German asbrdcst.dll 212992 04/22/2008 14:27:48\r\n11.5 Windows French asbrdcst.dll 212992 04/22/2008 14:26:54\r\n11.5 Windows Spanish asbrdcst.dll 212992 04/22/2008 14:32:38\r\n11.1 Windows English asbrdcst.dll 204800 04/24/2008 11:21:26\r\n11.1 Windows Japanese asbrdcst.dll 200704 04/24/2008 11:25:48\r\n11.1 Windows Simp Chinese asbrdcst.dll 196608 04/24/2008 11:27:44\r\n11.1 Windows Trad Chinese asbrdcst.dll 196608 04/24/2008 11:30:32\r\n11.1 Windows Italian asbrdcst.dll 204800 04/24/2008 11:28:38\r\n11.1 Windows Port-Braz asbrdcst.dll 204800 04/24/2008 11:38:52\r\n11.1 Windows German asbrdcst.dll 204800 04/24/2008 11:24:38\r\n11.1 Windows French asbrdcst.dll 204800 04/24/2008 11:23:38\r\n11.1 Windows Spanish asbrdcst.dll 204800 04/24/2008 11:29:34\r\n11.1 Windows Dutch asbrdcst.dll 204800 04/24/2008 11:33:24\r\n11.1 Windows Polish asbrdcst.dll 204800 04/24/2008 11:38:02\r\n11.1 Windows Russian asbrdcst.dll 204800 04/24/2008 11:39:44\r\n11.1 Windows Turkish asbrdcst.dll 204800 04/24/2008 11:41:28\r\n11.1 Windows Norwegian asbrdcst.dll 204800 04/24/2008 11:37:12\r\n11.1 Windows Danish asbrdcst.dll 204800 04/24/2008 11:32:28\r\n11.1 Windows Czech asbrdcst.dll 204800 04/24/2008 11:31:28\r\n11.1 Windows Hungarian asbrdcst.dll 204800 04/24/2008 11:36:22\r\n11.1 Windows Swedish asbrdcst.dll 204800 04/24/2008 11:40:38\r\n11.1 Windows Finnish asbrdcst.dll 204800 04/24/2008 11:34:40\r\n11.1 Windows Greek asbrdcst.dll 204800 04/24/2008 11:35:32\r\n11.1 Netware English asbrdcst.dll 204800 04/24/2008 11:21:26\r\n\r\n\r\nWorkaround: As a temporary workaround, stop and disable the CA \r\nARCserve Discovery service. With the service disabled, deploying \r\nagents using Auto-discovery will not work.\r\n\r\n\r\nReferences (URLs may wrap):\r\nCA Support:\r\nhttp://support.ca.com/\r\nSecurity Notice for CA ARCserve Discovery Service\r\nhttps://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=178937\r\nSolution Document Reference APARs:\r\nQO99574, QO99575, QO99129, QO99576, QO99579\r\nCA Security Response Blog posting:\r\nCA ARCserve Backup Discovery Service Denial of Service Vulnerability\r\nhttp://community.ca.com/blogs/casecurityresponseblog/archive/2008/06/18.aspx\r\nReported By: \r\nLuigi Auriemma\r\nhttp://aluigi.altervista.org/adv/carcbackazz-adv.txt\r\nCVE References:\r\nCVE-2008-1979 - casdscsvc denial of service\r\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1979\r\nOSVDB References: Pending\r\nhttp://osvdb.org/\r\n\r\n\r\nChangelog for this advisory:\r\nv1.0 - Initial Release\r\n\r\n\r\nCustomers who require additional information should contact CA\r\nTechnical Support at http://support.ca.com.\r\n\r\nFor technical questions or comments related to this advisory, \r\nplease send email to vuln AT ca DOT com.\r\n\r\nIf you discover a vulnerability in CA products, please report your \r\nfindings to our product security response team.\r\nhttps://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=177782\r\n\r\n\r\nRegards,\r\nKen Williams ; 0xE2941985\r\nDirector, CA Vulnerability Research\r\n\r\n\r\nCA, 1 CA Plaza, Islandia, NY 11749\r\n \r\nContact http://www.ca.com/us/contact/\r\nLegal Notice http://www.ca.com/us/legal/\r\nPrivacy Policy http://www.ca.com/us/privacy/\r\nCopyright (c) 2008 CA. All rights reserved.", "published": "2008-06-19T00:00:00", "modified": "2008-06-19T00:00:00", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}, "href": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:20063", "reporter": "Securityvulns", "references": [], "cvelist": ["CVE-2008-1979"], "type": "securityvulns", "lastseen": "2018-08-31T11:10:26", "edition": 1, "viewCount": 43, "enchantments": {"score": {"value": 6.3, "vector": "NONE", "modified": "2018-08-31T11:10:26", "rev": 2}, "dependencies": {"references": [{"type": "cve", "idList": ["CVE-2008-1979"]}, {"type": "securityvulns", "idList": ["SECURITYVULNS:VULN:9099"]}, {"type": "exploitdb", "idList": ["EDB-ID:31707"]}], "modified": "2018-08-31T11:10:26", "rev": 2}, "vulnersScore": 6.3}, "affectedSoftware": [], "immutableFields": [], "cvss2": {}, "cvss3": {}}

{"cve": [{"id": "CVE-2008-1979", "bulletinFamily": "NVD", "title": "CVE-2008-1979", "description": "The Discovery Service (casdscvc) in CA ARCserve Backup 12.0.5454.0 and earlier allows remote attackers to cause a denial of service (crash) via a packet with a large integer value used in an increment to TCP port 41523, which triggers a buffer over-read.", "published": "2008-04-27T20:05:00", "modified": "2021-04-07T18:13:00", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-1979", "reporter": "cve@mitre.org", "references": ["http://www.securityfocus.com/bid/28927", "http://www.securitytracker.com/id?1020324", "https://exchange.xforce.ibmcloud.com/vulnerabilities/41869", "http://secunia.com/advisories/29855", "http://www.vupen.com/english/advisories/2008/1354", "http://www.securityfocus.com/archive/1/493430/100/0/threaded", "http://aluigi.altervista.org/adv/carcbackazz-adv.txt"], "cvelist": ["CVE-2008-1979"], "type": "cve", "lastseen": "2021-04-21T20:41:34", "history": [{"bulletin": {"affectedConfiguration": [], "affectedSoftware": [{"cpeName": "ca:brightstor_arcserve_backup", "name": "ca brightstor arcserve backup", "operator": "le", "version": "12.0.5454.0"}], "bulletinFamily": "NVD", "cpe": ["cpe:/a:ca:brightstor_arcserve_backup:12.0.5454.0"], "cpe23": ["cpe:2.3:a:ca:brightstor_arcserve_backup:12.0.5454.0:*:*:*:*:*:*:*"], "cpeConfiguration": {"CVE_data_version": "4.0", "nodes": [{"cpe_match": [{"cpe23Uri": "cpe:2.3:a:ca:brightstor_arcserve_backup:12.0.5454.0:*:*:*:*:*:*:*", "versionEndIncluding": "12.0.5454.0", "vulnerable": true}], "operator": "OR"}]}, "cvelist": ["CVE-2008-1979"], "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P"}, "cvss2": {"cvssV2": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false}, "cvss3": {}, "cwe": ["CWE-189"], "description": "The Discovery Service (casdscvc) in CA ARCserve Backup 12.0.5454.0 and earlier allows remote attackers to cause a denial of service (crash) via a packet with a large integer value used in an increment to TCP port 41523, which triggers a buffer over-read.", "edition": 3, "enchantments": {"dependencies": {"modified": "2020-10-03T11:50:59", "references": [{"idList": ["SECURITYVULNS:DOC:20063", "SECURITYVULNS:VULN:9099"], "type": "securityvulns"}, {"idList": ["EDB-ID:31707"], "type": "exploitdb"}], "rev": 2}, "exploitation": {"modified": "2020-10-03T11:50:59", "wildExploited": false, "wildExploitedSources": []}, "score": {"modified": "2020-10-03T11:50:59", "rev": 2, "value": 6.1, "vector": "NONE"}}, "hash": "6bcda1e1852493913432d25a55f6d91667745f1294993587de219151d38d3bdf", "hashmap": [{"hash": "d984873b421f5bca400572c0e8c8ac99", "key": "cpe"}, {"hash": "d87a287a44d4e7992622f7b883089c1d", "key": "href"}, {"hash": "a0b591b5d93a17fc772f0b393ce66ed2", "key": "affectedSoftware"}, {"hash": "8e94b6946d5b107a17c1de16966608d8", "key": "published"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "affectedConfiguration"}, {"hash": "7d7c5f35269532e6785117964a2cc28a", "key": "cwe"}, {"hash": "f843b68758ed182ec38e1c2a46a3aec6", "key": "references"}, {"hash": "685389815b1252b4dde4fc6a472b68ef", "key": "title"}, {"hash": "9b0ecf29bfe8f571a297e52f03ccddbf", "key": "modified"}, {"hash": "7f4ff2356dadec08e8a96e7509c21785", "key": "cpe23"}, {"hash": "55fa7a83bac11a39b089d35734b4509d", "key": "cpeConfiguration"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cvss3"}, {"hash": "85fc9715d07b57d9e72056856b007c7b", "key": "cvss2"}, {"hash": "3310f4ce1030bfa3cdec289eb9fc36be", "key": "description"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "41b62a8aa1ee5c40897717cadc30784a", "key": "cvss"}, {"hash": "444c2b4dda4a55437faa8bef1a141e84", "key": "reporter"}, {"hash": "765130ce146ee1b129dbaf07f716d2b4", "key": "cvelist"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-1979", "id": "CVE-2008-1979", "lastseen": "2020-10-03T11:50:59", "modified": "2018-10-11T20:38:00", "objectVersion": "1.3", "published": "2008-04-27T20:05:00", "references": ["http://www.securityfocus.com/bid/28927", "http://www.securitytracker.com/id?1020324", "https://exchange.xforce.ibmcloud.com/vulnerabilities/41869", "http://secunia.com/advisories/29855", "http://www.vupen.com/english/advisories/2008/1354", "http://www.securityfocus.com/archive/1/493430/100/0/threaded", "http://aluigi.altervista.org/adv/carcbackazz-adv.txt"], "reporter": "cve@mitre.org", "title": "CVE-2008-1979", "type": "cve", "viewCount": 2}, "differentElements": ["affectedSoftware"], "edition": 3, "lastseen": "2020-10-03T11:50:59"}, {"bulletin": {"affectedConfiguration": [], "affectedSoftware": [{"cpeName": "ca:brightstor_arcserve_backup", "name": "ca brightstor arcserve backup", "operator": "le", "version": "12.0.5454.0"}], "bulletinFamily": "NVD", "cpe": ["cpe:/a:ca:brightstor_arcserve_backup:12.0.5454.0"], "cpe23": ["cpe:2.3:a:ca:brightstor_arcserve_backup:12.0.5454.0:*:*:*:*:*:*:*"], "cpeConfiguration": {"CVE_data_version": "4.0", "nodes": [{"cpe_match": [{"cpe23Uri": "cpe:2.3:a:ca:brightstor_arcserve_backup:12.0.5454.0:*:*:*:*:*:*:*", "versionEndIncluding": "12.0.5454.0", "vulnerable": true}], "operator": "OR"}]}, "cvelist": ["CVE-2008-1979"], "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P"}, "cvss2": {"cvssV2": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false}, "cvss3": {}, "cwe": ["CWE-189"], "description": "The Discovery Service (casdscvc) in CA ARCserve Backup 12.0.5454.0 and earlier allows remote attackers to cause a denial of service (crash) via a packet with a large integer value used in an increment to TCP port 41523, which triggers a buffer over-read.", "edition": 5, "enchantments": {"dependencies": {"modified": "2020-12-09T19:28:22", "references": [{"idList": ["SECURITYVULNS:DOC:20063", "SECURITYVULNS:VULN:9099"], "type": "securityvulns"}, {"idList": ["EDB-ID:31707"], "type": "exploitdb"}], "rev": 2}, "score": {"modified": "2020-12-09T19:28:22", "rev": 2, "value": 6.1, "vector": "NONE"}}, "extraReferences": [], "hash": "348f0d1ec17d264d47cd20002e7e6413c4f2f55a1717a1b951fb23495d682ff3", "hashmap": [{"hash": "d984873b421f5bca400572c0e8c8ac99", "key": "cpe"}, {"hash": "d87a287a44d4e7992622f7b883089c1d", "key": "href"}, {"hash": "a0b591b5d93a17fc772f0b393ce66ed2", "key": "affectedSoftware"}, {"hash": "8e94b6946d5b107a17c1de16966608d8", "key": "published"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "affectedConfiguration"}, {"hash": "7d7c5f35269532e6785117964a2cc28a", "key": "cwe"}, {"hash": "f843b68758ed182ec38e1c2a46a3aec6", "key": "references"}, {"hash": "685389815b1252b4dde4fc6a472b68ef", "key": "title"}, {"hash": "9b0ecf29bfe8f571a297e52f03ccddbf", "key": "modified"}, {"hash": "7f4ff2356dadec08e8a96e7509c21785", "key": "cpe23"}, {"hash": "55fa7a83bac11a39b089d35734b4509d", "key": "cpeConfiguration"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cvss3"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "extraReferences"}, {"hash": "85fc9715d07b57d9e72056856b007c7b", "key": "cvss2"}, {"hash": "3310f4ce1030bfa3cdec289eb9fc36be", "key": "description"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "41b62a8aa1ee5c40897717cadc30784a", "key": "cvss"}, {"hash": "444c2b4dda4a55437faa8bef1a141e84", "key": "reporter"}, {"hash": "765130ce146ee1b129dbaf07f716d2b4", "key": "cvelist"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-1979", "id": "CVE-2008-1979", "lastseen": "2020-12-09T19:28:22", "modified": "2018-10-11T20:38:00", "objectVersion": "1.3", "published": "2008-04-27T20:05:00", "references": ["http://www.securityfocus.com/bid/28927", "http://www.securitytracker.com/id?1020324", "https://exchange.xforce.ibmcloud.com/vulnerabilities/41869", "http://secunia.com/advisories/29855", "http://www.vupen.com/english/advisories/2008/1354", "http://www.securityfocus.com/archive/1/493430/100/0/threaded", "http://aluigi.altervista.org/adv/carcbackazz-adv.txt"], "reporter": "cve@mitre.org", "title": "CVE-2008-1979", "type": "cve", "viewCount": 2}, "differentElements": ["extraReferences"], "edition": 5, "lastseen": "2020-12-09T19:28:22"}, {"bulletin": {"affectedConfiguration": [], "affectedSoftware": [{"cpeName": "ca:brightstor_arcserve_backup", "name": "ca brightstor arcserve backup", "operator": "le", "version": "*"}], "bulletinFamily": "NVD", "cpe": ["cpe:/a:ca:brightstor_arcserve_backup:12.0.5454.0"], "cpe23": ["cpe:2.3:a:ca:brightstor_arcserve_backup:12.0.5454.0:*:*:*:*:*:*:*"], "cpeConfiguration": {"CVE_data_version": "4.0", "nodes": [{"cpe_match": [{"cpe23Uri": "cpe:2.3:a:ca:brightstor_arcserve_backup:12.0.5454.0:*:*:*:*:*:*:*", "versionEndIncluding": "12.0.5454.0", "vulnerable": true}], "operator": "OR"}]}, "cvelist": ["CVE-2008-1979"], "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P"}, "cvss2": {"cvssV2": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false}, "cvss3": {}, "cwe": ["CWE-189"], "description": "The Discovery Service (casdscvc) in CA ARCserve Backup 12.0.5454.0 and earlier allows remote attackers to cause a denial of service (crash) via a packet with a large integer value used in an increment to TCP port 41523, which triggers a buffer over-read.", "edition": 4, "enchantments": {"dependencies": {"modified": "2020-11-29T22:56:09", "references": [{"idList": ["SECURITYVULNS:DOC:20063", "SECURITYVULNS:VULN:9099"], "type": "securityvulns"}, {"idList": ["EDB-ID:31707"], "type": "exploitdb"}], "rev": 2}, "score": {"modified": "2020-11-29T22:56:09", "rev": 2, "value": 6.1, "vector": "NONE"}}, "hash": "8bc961b55299b88453a5ccd34739099b85b7ebd5f7ffc436cbd9c4de6caab4d6", "hashmap": [{"hash": "d984873b421f5bca400572c0e8c8ac99", "key": "cpe"}, {"hash": "d87a287a44d4e7992622f7b883089c1d", "key": "href"}, {"hash": "8e94b6946d5b107a17c1de16966608d8", "key": "published"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "affectedConfiguration"}, {"hash": "7d7c5f35269532e6785117964a2cc28a", "key": "cwe"}, {"hash": "f843b68758ed182ec38e1c2a46a3aec6", "key": "references"}, {"hash": "685389815b1252b4dde4fc6a472b68ef", "key": "title"}, {"hash": "9b0ecf29bfe8f571a297e52f03ccddbf", "key": "modified"}, {"hash": "7f4ff2356dadec08e8a96e7509c21785", "key": "cpe23"}, {"hash": "55fa7a83bac11a39b089d35734b4509d", "key": "cpeConfiguration"}, {"hash": "a2674b4e6ac0904468a5ee4d510e015c", "key": "affectedSoftware"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cvss3"}, {"hash": "85fc9715d07b57d9e72056856b007c7b", "key": "cvss2"}, {"hash": "3310f4ce1030bfa3cdec289eb9fc36be", "key": "description"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "41b62a8aa1ee5c40897717cadc30784a", "key": "cvss"}, {"hash": "444c2b4dda4a55437faa8bef1a141e84", "key": "reporter"}, {"hash": "765130ce146ee1b129dbaf07f716d2b4", "key": "cvelist"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-1979", "id": "CVE-2008-1979", "lastseen": "2020-11-29T22:56:09", "modified": "2018-10-11T20:38:00", "objectVersion": "1.3", "published": "2008-04-27T20:05:00", "references": ["http://www.securityfocus.com/bid/28927", "http://www.securitytracker.com/id?1020324", "https://exchange.xforce.ibmcloud.com/vulnerabilities/41869", "http://secunia.com/advisories/29855", "http://www.vupen.com/english/advisories/2008/1354", "http://www.securityfocus.com/archive/1/493430/100/0/threaded", "http://aluigi.altervista.org/adv/carcbackazz-adv.txt"], "reporter": "cve@mitre.org", "title": "CVE-2008-1979", "type": "cve", "viewCount": 2}, "differentElements": ["affectedSoftware"], "edition": 4, "lastseen": "2020-11-29T22:56:09"}, {"bulletin": {"affectedConfiguration": [], "affectedSoftware": [{"cpeName": "broadcom:brightstor_arcserve_backup", "name": "broadcom brightstor arcserve backup", "operator": "le", "version": "12.0.5454.0"}], "bulletinFamily": "NVD", "cpe": ["cpe:/a:broadcom:brightstor_arcserve_backup:12.0.5454.0"], "cpe23": ["cpe:2.3:a:broadcom:brightstor_arcserve_backup:12.0.5454.0:*:*:*:*:*:*:*"], "cpeConfiguration": {"CVE_data_version": "4.0", "nodes": [{"cpe_match": [{"cpe23Uri": "cpe:2.3:a:broadcom:brightstor_arcserve_backup:12.0.5454.0:*:*:*:*:*:*:*", "versionEndIncluding": "12.0.5454.0", "vulnerable": true}], "operator": "OR"}]}, "cvelist": ["CVE-2008-1979"], "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P"}, "cvss2": {"cvssV2": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false}, "cvss3": {}, "cwe": ["CWE-189"], "description": "The Discovery Service (casdscvc) in CA ARCserve Backup 12.0.5454.0 and earlier allows remote attackers to cause a denial of service (crash) via a packet with a large integer value used in an increment to TCP port 41523, which triggers a buffer over-read.", "edition": 7, "enchantments": {"dependencies": {"modified": "2021-04-08T12:29:02", "references": [{"idList": ["SECURITYVULNS:DOC:20063", "SECURITYVULNS:VULN:9099"], "type": "securityvulns"}, {"idList": ["EDB-ID:31707"], "type": "exploitdb"}], "rev": 2}, "score": {"modified": "2021-04-08T12:29:02", "rev": 2, "value": 6.1, "vector": "NONE"}}, "extraReferences": [{"name": "20080618 CA ARCserve Backup Discovery Service Denial of Service Vulnerability", "refsource": "BUGTRAQ", "tags": [], "url": "http://www.securityfocus.com/archive/1/493430/100/0/threaded"}, {"name": "29855", "refsource": "SECUNIA", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/29855"}, {"name": "http://aluigi.altervista.org/adv/carcbackazz-adv.txt", "refsource": "MISC", "tags": ["Exploit"], "url": "http://aluigi.altervista.org/adv/carcbackazz-adv.txt"}, {"name": "ca-arcservebackup-casdscvc-dos(41869)", "refsource": "XF", "tags": [], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41869"}, {"name": "1020324", "refsource": "SECTRACK", "tags": [], "url": "http://www.securitytracker.com/id?1020324"}, {"name": "ADV-2008-1354", "refsource": "VUPEN", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2008/1354"}, {"name": "28927", "refsource": "BID", "tags": [], "url": "http://www.securityfocus.com/bid/28927"}], "hash": "40e0f8fb2717ab2f7913600d510920172cde4e0132b5b8a64484ce429b1a3822", "hashmap": [{"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "immutableFields"}, {"hash": "d87a287a44d4e7992622f7b883089c1d", "key": "href"}, {"hash": "8e94b6946d5b107a17c1de16966608d8", "key": "published"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "affectedConfiguration"}, {"hash": "9624a6186f54ac5a1fe48fe102fc3183", "key": "cpe23"}, {"hash": "970c994184c41659944331df39de4810", "key": "extraReferences"}, {"hash": "7d7c5f35269532e6785117964a2cc28a", "key": "cwe"}, {"hash": "f843b68758ed182ec38e1c2a46a3aec6", "key": "references"}, {"hash": "a21e9bb94f330f71b23fc24d694027ca", "key": "cpe"}, {"hash": "ff39426575398365f08b27294045b68c", "key": "modified"}, {"hash": "06c6a123b1594400b64ef2a852bb7337", "key": "cpeConfiguration"}, {"hash": "685389815b1252b4dde4fc6a472b68ef", "key": "title"}, {"hash": "ecd046635133b5dd8683c9887da269b8", "key": "affectedSoftware"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cvss3"}, {"hash": "85fc9715d07b57d9e72056856b007c7b", "key": "cvss2"}, {"hash": "3310f4ce1030bfa3cdec289eb9fc36be", "key": "description"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "41b62a8aa1ee5c40897717cadc30784a", "key": "cvss"}, {"hash": "444c2b4dda4a55437faa8bef1a141e84", "key": "reporter"}, {"hash": "765130ce146ee1b129dbaf07f716d2b4", "key": "cvelist"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-1979", "id": "CVE-2008-1979", "immutableFields": [], "lastseen": "2021-04-08T12:29:02", "modified": "2021-04-07T18:13:00", "objectVersion": "1.5", "published": "2008-04-27T20:05:00", "references": ["http://www.securityfocus.com/bid/28927", "http://www.securitytracker.com/id?1020324", "https://exchange.xforce.ibmcloud.com/vulnerabilities/41869", "http://secunia.com/advisories/29855", "http://www.vupen.com/english/advisories/2008/1354", "http://www.securityfocus.com/archive/1/493430/100/0/threaded", "http://aluigi.altervista.org/adv/carcbackazz-adv.txt"], "reporter": "cve@mitre.org", "title": "CVE-2008-1979", "type": "cve", "viewCount": 3}, "different_elements": ["cpeConfiguration"], "edition": 7, "lastseen": "2021-04-08T12:29:02"}, {"bulletin": {"affectedConfiguration": [], "affectedSoftware": [{"cpeName": "ca:brightstor_arcserve_backup", "name": "ca brightstor arcserve backup", "operator": "le", "version": "12.0.5454.0"}], "bulletinFamily": "NVD", "cpe": ["cpe:/a:ca:brightstor_arcserve_backup:12.0.5454.0"], "cpe23": ["cpe:2.3:a:ca:brightstor_arcserve_backup:12.0.5454.0:*:*:*:*:*:*:*"], "cpeConfiguration": {"CVE_data_version": "4.0", "nodes": [{"cpe_match": [{"cpe23Uri": "cpe:2.3:a:ca:brightstor_arcserve_backup:12.0.5454.0:*:*:*:*:*:*:*", "versionEndIncluding": "12.0.5454.0", "vulnerable": true}], "operator": "OR"}]}, "cvelist": ["CVE-2008-1979"], "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P"}, "cvss2": {"cvssV2": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false}, "cvss3": {}, "cwe": ["CWE-189"], "description": "The Discovery Service (casdscvc) in CA ARCserve Backup 12.0.5454.0 and earlier allows remote attackers to cause a denial of service (crash) via a packet with a large integer value used in an increment to TCP port 41523, which triggers a buffer over-read.", "edition": 6, "enchantments": {"dependencies": {"modified": "2021-02-02T05:35:13", "references": [{"idList": ["SECURITYVULNS:DOC:20063", "SECURITYVULNS:VULN:9099"], "type": "securityvulns"}, {"idList": ["EDB-ID:31707"], "type": "exploitdb"}], "rev": 2}, "score": {"modified": "2021-02-02T05:35:13", "rev": 2, "value": 6.1, "vector": "NONE"}}, "extraReferences": [{"name": "20080618 CA ARCserve Backup Discovery Service Denial of Service Vulnerability", "refsource": "BUGTRAQ", "tags": [], "url": "http://www.securityfocus.com/archive/1/493430/100/0/threaded"}, {"name": "29855", "refsource": "SECUNIA", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/29855"}, {"name": "http://aluigi.altervista.org/adv/carcbackazz-adv.txt", "refsource": "MISC", "tags": ["Exploit"], "url": "http://aluigi.altervista.org/adv/carcbackazz-adv.txt"}, {"name": "ca-arcservebackup-casdscvc-dos(41869)", "refsource": "XF", "tags": [], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41869"}, {"name": "1020324", "refsource": "SECTRACK", "tags": [], "url": "http://www.securitytracker.com/id?1020324"}, {"name": "ADV-2008-1354", "refsource": "VUPEN", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2008/1354"}, {"name": "28927", "refsource": "BID", "tags": [], "url": "http://www.securityfocus.com/bid/28927"}], "hash": "fef22ba9b08827107f2126a9365e3334565383aac8b32d4dbf37639f72cfc7f8", "hashmap": [{"hash": "d984873b421f5bca400572c0e8c8ac99", "key": "cpe"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "immutableFields"}, {"hash": "d87a287a44d4e7992622f7b883089c1d", "key": "href"}, {"hash": "a0b591b5d93a17fc772f0b393ce66ed2", "key": "affectedSoftware"}, {"hash": "8e94b6946d5b107a17c1de16966608d8", "key": "published"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "affectedConfiguration"}, {"hash": "970c994184c41659944331df39de4810", "key": "extraReferences"}, {"hash": "7d7c5f35269532e6785117964a2cc28a", "key": "cwe"}, {"hash": "f843b68758ed182ec38e1c2a46a3aec6", "key": "references"}, {"hash": "685389815b1252b4dde4fc6a472b68ef", "key": "title"}, {"hash": "9b0ecf29bfe8f571a297e52f03ccddbf", "key": "modified"}, {"hash": "7f4ff2356dadec08e8a96e7509c21785", "key": "cpe23"}, {"hash": "55fa7a83bac11a39b089d35734b4509d", "key": "cpeConfiguration"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cvss3"}, {"hash": "85fc9715d07b57d9e72056856b007c7b", "key": "cvss2"}, {"hash": "3310f4ce1030bfa3cdec289eb9fc36be", "key": "description"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "41b62a8aa1ee5c40897717cadc30784a", "key": "cvss"}, {"hash": "444c2b4dda4a55437faa8bef1a141e84", "key": "reporter"}, {"hash": "765130ce146ee1b129dbaf07f716d2b4", "key": "cvelist"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-1979", "id": "CVE-2008-1979", "immutableFields": [], "lastseen": "2021-02-02T05:35:13", "modified": "2018-10-11T20:38:00", "objectVersion": "1.5", "published": "2008-04-27T20:05:00", "references": ["http://www.securityfocus.com/bid/28927", "http://www.securitytracker.com/id?1020324", "https://exchange.xforce.ibmcloud.com/vulnerabilities/41869", "http://secunia.com/advisories/29855", "http://www.vupen.com/english/advisories/2008/1354", "http://www.securityfocus.com/archive/1/493430/100/0/threaded", "http://aluigi.altervista.org/adv/carcbackazz-adv.txt"], "reporter": "cve@mitre.org", "title": "CVE-2008-1979", "type": "cve", "viewCount": 3}, "different_elements": ["cpe23", "modified", "cpe", "affectedSoftware", "cpeConfiguration"], "edition": 6, "lastseen": "2021-02-02T05:35:13"}], "edition": 8, "hashmap": [{"key": "affectedConfiguration", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "affectedSoftware", "hash": "ecd046635133b5dd8683c9887da269b8"}, {"key": "bulletinFamily", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "cpe", "hash": "a21e9bb94f330f71b23fc24d694027ca"}, {"key": "cpe23", "hash": "9624a6186f54ac5a1fe48fe102fc3183"}, {"key": "cpeConfiguration", "hash": "d5d4ad9a1648546c469831514810a2c0"}, {"key": "cvelist", "hash": "765130ce146ee1b129dbaf07f716d2b4"}, {"key": "cvss", "hash": "41b62a8aa1ee5c40897717cadc30784a"}, {"key": "cvss2", "hash": "85fc9715d07b57d9e72056856b007c7b"}, {"key": "cvss3", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "cwe", "hash": "7d7c5f35269532e6785117964a2cc28a"}, {"key": "description", "hash": "3310f4ce1030bfa3cdec289eb9fc36be"}, {"key": "extraReferences", "hash": "970c994184c41659944331df39de4810"}, {"key": "href", "hash": "d87a287a44d4e7992622f7b883089c1d"}, {"key": "immutableFields", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "modified", "hash": "ff39426575398365f08b27294045b68c"}, {"key": "published", "hash": "8e94b6946d5b107a17c1de16966608d8"}, {"key": "references", "hash": "f843b68758ed182ec38e1c2a46a3aec6"}, {"key": "reporter", "hash": "444c2b4dda4a55437faa8bef1a141e84"}, {"key": "title", "hash": "685389815b1252b4dde4fc6a472b68ef"}, {"key": "type", "hash": "1716b5fcbb7121af74efdc153d0166c5"}], "hash": "dc3d068c5dcb7535bd83616a45dfd5267327bdc432cca7de649f5f1c89c894f5", "viewCount": 8, "enchantments": {"dependencies": {"references": [{"type": "securityvulns", "idList": ["SECURITYVULNS:DOC:20063", "SECURITYVULNS:VULN:9099"]}, {"type": "exploitdb", "idList": ["EDB-ID:31707"]}], "modified": "2021-04-21T20:41:34", "rev": 2}, "score": {"value": 6.1, "vector": "NONE", "modified": "2021-04-21T20:41:34", "rev": 2}}, "objectVersion": "1.5", "cpe": ["cpe:/a:broadcom:brightstor_arcserve_backup:12.0.5454.0"], "affectedSoftware": [{"cpeName": "broadcom:brightstor_arcserve_backup", "name": "broadcom brightstor arcserve backup", "operator": "le", "version": "12.0.5454.0"}], "cvss2": {"cvssV2": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false}, "cvss3": {}, "cpe23": ["cpe:2.3:a:broadcom:brightstor_arcserve_backup:12.0.5454.0:*:*:*:*:*:*:*"], "cwe": ["CWE-189"], "scheme": null, "cpeConfiguration": {"CVE_data_version": "4.0", "nodes": [{"children": [], "cpe_match": [{"cpe23Uri": "cpe:2.3:a:broadcom:brightstor_arcserve_backup:12.0.5454.0:*:*:*:*:*:*:*", "cpe_name": [], "versionEndIncluding": "12.0.5454.0", "vulnerable": true}], "operator": "OR"}]}, "extraReferences": [{"name": "20080618 CA ARCserve Backup Discovery Service Denial of Service Vulnerability", "refsource": "BUGTRAQ", "tags": [], "url": "http://www.securityfocus.com/archive/1/493430/100/0/threaded"}, {"name": "29855", "refsource": "SECUNIA", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/29855"}, {"name": "http://aluigi.altervista.org/adv/carcbackazz-adv.txt", "refsource": "MISC", "tags": ["Exploit"], "url": "http://aluigi.altervista.org/adv/carcbackazz-adv.txt"}, {"name": "ca-arcservebackup-casdscvc-dos(41869)", "refsource": "XF", "tags": [], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41869"}, {"name": "1020324", "refsource": "SECTRACK", "tags": [], "url": "http://www.securitytracker.com/id?1020324"}, {"name": "ADV-2008-1354", "refsource": "VUPEN", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2008/1354"}, {"name": "28927", "refsource": "BID", "tags": [], "url": "http://www.securityfocus.com/bid/28927"}], "immutableFields": []}], "exploitdb": [{"id": "EDB-ID:31707", "hash": "7f28633f6b4bf0ec0a6a2e5aacd1fa831762a97596ff9ba270b4373d6cda985b", "type": "exploitdb", "bulletinFamily": "exploit", "title": "Computer Associates ARCserve Backup Discovery Service Remote - Denial Of Service Vulnerability", "description": "Computer Associates ARCserve Backup Discovery Service Remote Denial Of Service Vulnerability. CVE-2008-1979. Dos exploit for windows platform", "published": "2008-04-24T00:00:00", "modified": "2008-04-24T00:00:00", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}, "href": "https://www.exploit-db.com/exploits/31707/", "reporter": "Luigi Auriemma", "references": [], "cvelist": ["CVE-2008-1979"], "lastseen": "2016-02-03T15:17:32", "history": [{"lastseen": "2016-02-03T15:17:32", "different_elements": ["cvss2"], "edition": 1, "bulletin": {"lastseen": "2016-02-03T15:17:32", "references": [], "description": "Computer Associates ARCserve Backup Discovery Service Remote Denial Of Service Vulnerability. CVE-2008-1979. Dos exploit for windows platform", "edition": 1, "cvss3": {}, "reporter": "Luigi Auriemma", "history": [], "published": "2008-04-24T00:00:00", "enchantments": {"score": {"rev": 2, "modified": "2016-02-03T15:17:32", "vector": "NONE", "value": 6.3}, "dependencies": {"rev": 2, "references": [{"idList": ["SECURITYVULNS:DOC:20063", "SECURITYVULNS:VULN:9099"], "type": "securityvulns"}, {"idList": ["CVE-2008-1979"], "type": "cve"}], "modified": "2016-02-03T15:17:32"}}, "title": "Computer Associates ARCserve Backup Discovery Service Remote - Denial Of Service Vulnerability", "type": "exploitdb", "objectVersion": "1.5", "bulletinFamily": "exploit", "cvss2": {}, "cvelist": ["CVE-2008-1979"], "immutableFields": [], "modified": "2008-04-24T00:00:00", "href": "https://www.exploit-db.com/exploits/31707/", "id": "EDB-ID:31707", "viewCount": 13, "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}, "hashmap": [{"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "immutableFields"}, {"hash": "8775b13305e26c99d6db9ffe29f97068", "key": "published"}, {"hash": "708697c63f7eb369319c6523380bdf7a", "key": "bulletinFamily"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "references"}, {"hash": "156405c92156a64ca348a14ef921a651", "key": "description"}, {"hash": "daa4d4734266b40623268bdc2dd33058", "key": "href"}, {"hash": "916b5dbd201b469998d9b4a4c8bc4e08", "key": "type"}, {"hash": "5a856d8508314549fc011ddb2462253e", "key": "reporter"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cvss3"}, {"hash": "8775b13305e26c99d6db9ffe29f97068", "key": "modified"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cvss2"}, {"hash": "84813b1457b92d6ba1174abffbb83a2f", "key": "cvss"}, {"hash": "73ec4ca744348fd5c958b5d007ecbd45", "key": "title"}, {"hash": "765130ce146ee1b129dbaf07f716d2b4", "key": "cvelist"}], "hash": "af2236e23f0896e88fa940cc8c548aa55639fb0808aa18328640aa3c40a7346f"}}], "viewCount": 14, "enchantments": {"score": {"value": 6.3, "vector": "NONE", "modified": "2016-02-03T15:17:32", "rev": 2}, "dependencies": {"references": [{"idList": ["SECURITYVULNS:DOC:20063", "SECURITYVULNS:VULN:9099"], "type": "securityvulns"}, {"idList": ["CVE-2008-1979"], "type": "cve"}], "modified": "2016-02-03T15:17:32", "rev": 2}, "exploitation": {"wildExploited": false, "wildExploitedSources": [], "modified": "2016-02-03T15:17:32"}}, "objectVersion": "1.5", "sourceHref": "https://www.exploit-db.com/download/31707/", "sourceData": "source: http://www.securityfocus.com/bid/28927/info\r\n\r\nComputer Associates ARCserve Backup is affected by a denial-of-service vulnerability because the application mishandles malformed user-supplied input.\r\n\r\nA remote attacker may exploit this issue to cause denial-of-service conditions.\r\n\r\nCA ARCserve Backup 12.0.5454.0 is affected by this issue; other versions may also be vulnerable. \r\n\r\nhttps://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/31707.zip", "osvdbidlist": ["44562"], "_object_type": "robots.models.exploitdb.ExploitDbBulletin", "_object_types": ["robots.models.exploitdb.ExploitDbBulletin", "robots.models.base.Bulletin"], "scheme": null, "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "NONE", "availabilityImpact": "PARTIAL", "integrityImpact": "NONE", "baseScore": 5.0, "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 2.9, "obtainUserPrivilege": false}, "edition": 2, "hashmap": [{"key": "bulletinFamily", "hash": "708697c63f7eb369319c6523380bdf7a"}, {"key": "cvelist", "hash": "765130ce146ee1b129dbaf07f716d2b4"}, {"key": "cvss", "hash": "84813b1457b92d6ba1174abffbb83a2f"}, {"key": "cvss2", "hash": "85fc9715d07b57d9e72056856b007c7b"}, {"key": "cvss3", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "description", "hash": "156405c92156a64ca348a14ef921a651"}, {"key": "href", "hash": "daa4d4734266b40623268bdc2dd33058"}, {"key": "immutableFields", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "modified", "hash": "8775b13305e26c99d6db9ffe29f97068"}, {"key": "published", "hash": "8775b13305e26c99d6db9ffe29f97068"}, {"key": "references", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "reporter", "hash": "5a856d8508314549fc011ddb2462253e"}, {"key": "title", "hash": "73ec4ca744348fd5c958b5d007ecbd45"}, {"key": "type", "hash": "916b5dbd201b469998d9b4a4c8bc4e08"}]}], "securityvulns": [{"id": "SECURITYVULNS:VULN:9099", "bulletinFamily": "software", "title": "CA ARCserve Backup Discovery Service DoS", "description": "Malformed request causes service to crash.", "published": "2008-06-19T00:00:00", "modified": "2008-06-19T00:00:00", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}, "href": "https://vulners.com/securityvulns/SECURITYVULNS:VULN:9099", "reporter": "BUGTRAQ", "references": ["https://vulners.com/securityvulns/securityvulns:doc:20063"], "cvelist": ["CVE-2008-1979"], "type": "securityvulns", "lastseen": "2018-08-31T11:09:30", "history": [], "edition": 1, "hashmap": [{"key": "affectedSoftware", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "bulletinFamily", "hash": "f9fa10ba956cacf91d7878861139efb9"}, {"key": "cvelist", "hash": "765130ce146ee1b129dbaf07f716d2b4"}, {"key": "cvss", "hash": "84813b1457b92d6ba1174abffbb83a2f"}, {"key": "description", "hash": "a10d00b64b0488ef12e4560ae8b5ac34"}, {"key": "href", "hash": "089f9de6fe64330c83c7d3e545fbd03d"}, {"key": "modified", "hash": "1d1fc97c9aabd84ae4fdce35f17c4609"}, {"key": "published", "hash": "1d1fc97c9aabd84ae4fdce35f17c4609"}, {"key": "references", "hash": "ebd6f0ba7b2eb31f2292a97e2bea3c3b"}, {"key": "reporter", "hash": "2c5cca82a8670da097919f6160833daf"}, {"key": "title", "hash": "f025f4b33db9143462e46d9a0d7070fe"}, {"key": "type", "hash": "d54751dd75af2ea0147b462b3e001cd0"}], "hash": "b32f23d858d45dda69724a4226ac686bd3bb1191c478b31db9e07fe95e1f0e64", "viewCount": 2, "enchantments": {"score": {"value": 5.5, "vector": "NONE", "modified": "2018-08-31T11:09:30", "rev": 2}, "dependencies": {"references": [{"type": "cve", "idList": ["CVE-2008-1979"]}, {"type": "exploitdb", "idList": ["EDB-ID:31707"]}, {"type": "securityvulns", "idList": ["SECURITYVULNS:DOC:20063"]}], "modified": "2018-08-31T11:09:30", "rev": 2}}, "objectVersion": "1.3", "affectedSoftware": []}]}