CVE-2012-2972

Impact

The (1) server and (2) agent components in CA ARCserve Backup r12.5, r15, and r16 on Windows do not properly validate RPC requests, which allows remote attackers to cause a denial of service (service crash) via a crafted request.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

Weakness classification

References

• NVD record
• CVE.org record
• http://osvdb.org/86415
• http://packetstormsecurity.com/files/119543/Security-Notice-For-CA-ARCserve-Backup.html
• http://seclists.org/fulldisclosure/2013/Jan/86
• http://secunia.com/advisories/51012
• http://www.kb.cert.org/vuls/id/408099
• https://exchange.xforce.ibmcloud.com/vulnerabilities/79477
• https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7BF9EEA31E-8089-423E-B746-41B5C9DD2AC1%7D
• http://osvdb.org/86415
• http://packetstormsecurity.com/files/119543/Security-Notice-For-CA-ARCserve-Backup.html
• http://seclists.org/fulldisclosure/2013/Jan/86
• http://secunia.com/advisories/51012
• http://www.kb.cert.org/vuls/id/408099
• https://exchange.xforce.ibmcloud.com/vulnerabilities/79477
• https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7BF9EEA31E-8089-423E-B746-41B5C9DD2AC1%7D