CVE-2008-3175
Summary
| CVE | CVE-2008-3175 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2008-08-01 14:41:00 UTC |
| Updated | 2026-04-23 00:35:47 UTC |
| Description | Integer underflow in rxRPC.dll in the LGServer service in the server in CA ARCserve Backup for Laptops and Desktops 11.0 through 11.5 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted message that triggers a buffer overflow. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
CompleteIntegrity
CompleteAvailability
CompleteAV:N/AC:L/Au:N/C:C/I:C/A:C
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Broadcom | Brightstor Arcserve Backup | 11.1 | All | All | All |
| Application | Broadcom | Brightstor Arcserve Backup | 11.5 | All | All | All |
| Application | Broadcom | Desktop Management Suite | 11.1 | All | All | All |
| Application | Broadcom | Desktop Management Suite | 11.2 | All | All | All |
| Application | Ca | Arcserve Backup For Laptops And Desktops | 11.0 | All | All | All |
| Application | Ca | Arcserve Backup For Laptops And Desktops | 11.1 | All | All | All |
| Application | Ca | Arcserve Backup For Laptops And Desktops | 11.1 | All | sp1 | All |
| Application | Ca | Arcserve Backup For Laptops And Desktops | 11.1 | All | sp2 | All |
| Application | Ca | Arcserve Backup For Laptops And Desktops | 11.5 | All | All | All |
| Application | Ca | Brightstor Arcserve Backup | 11.0 | All | All | All |
| Application | Ca | Brightstor Arcserve Backup | 11.1 | All | sp1 | All |
| Application | Ca | Brightstor Arcserve Backup | 11.1 | All | sp2 | All |
| Application | Ca | Protection Suites | 2 | All | All | All |
| Application | Ca | Protection Suites | 3.0 | All | All | All |
| Application | Ca | Protection Suites | 3.1 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| SecurityFocus | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | Vendor Advisory |
| Computer Associates ARCserve Backup for Laptops and Desktops Remote Buffer Overflow Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | Patch |
| CA ARCserve Backup for Laptops and Desktops Integer Overflow in LGServer Service May Let Remote Users Execute Arbitrary Code - SecurityTracker | af854a3a-2127-422b-91ae-364da2661108 | www.securitytracker.com | |
| 404 Not Found | af854a3a-2127-422b-91ae-364da2661108 | support.ca.com | Patch, Vendor Advisory |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| [Full-Disclosure] Mailing List Charter | af854a3a-2127-422b-91ae-364da2661108 | lists.grok.org.uk | |
| CA ARCserve Backup for Laptops and Desktops LGServer Service Integer Underflow - Advisories - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.