CVE-2009-1761 - The message engine in CA ARCserve Backup r12.0 and r12.0 SP1 for Windows allows remote attackers to cause a denial of service (crash) via (1) an invalid 0x13 message, which is not properly handled in the ASCORE module, or (2) a 0x3B message with invalid stub data that triggers an RPC marshalling error

Back Back to CVE browser

MEDIUM

The message engine in CA ARCserve Backup r12.0 and r12.0 SP1 for Windows allows remote attackers to cause a denial of service (crash) via (1) an invalid 0x13 message, which is not properly handled in the ASCORE module, or (2) a 0x3B message with invalid stub data that triggers an RPC marshalling error

Published Jun 16, 2009

5.0

MEDIUM

CVSS 2.0

EPSS 2.23%

Description

The message engine in CA ARCserve Backup r12.0 and r12.0 SP1 for Windows allows remote attackers to cause a denial of service (crash) via (1) an invalid 0x13 message, which is not properly handled in the ASCORE module, or (2) a 0x3B message with invalid stub data that triggers an RPC marshalling error.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (11)

http://community.ca.com/blogs/casecurityresponseblog/archive/2009/06/15/ca20090615-01-ca-arcserve-backup-message-engine-denial-of-service-vulnerabilities.aspx
x_refsource_CONFIRMPatch
http://secunia.com/advisories/35473
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=209502
x_refsource_CONFIRMPatchVendor Advisory
http://www.ivizsecurity.com/security-advisory-iviz-sr-09003.html
x_refsource_MISCExploit
http://www.ivizsecurity.com/security-advisory-iviz-sr-09004.html
x_refsource_MISCExploit
http://www.securityfocus.com/archive/1/504348/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/504349/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/35396
vdb-entryx_refsource_BID
http://www.securitytracker.com/id?1022405
vdb-entryx_refsource_SECTRACK
http://www.vupen.com/english/advisories/2009/1608
vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/51169
vdb-entryx_refsource_XF

Link	Providers	Tags
http://community.ca.com/blogs/casecurityresponseblog/archive/2009/06/15/ca20090615-01-ca-arcserve-backup-message-engine-denial-of-service-vulnerabilities.aspx		x_refsource_CONFIRMPatch
http://secunia.com/advisories/35473		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=209502		x_refsource_CONFIRMPatchVendor Advisory
http://www.ivizsecurity.com/security-advisory-iviz-sr-09003.html		x_refsource_MISCExploit
http://www.ivizsecurity.com/security-advisory-iviz-sr-09004.html		x_refsource_MISCExploit
http://www.securityfocus.com/archive/1/504348/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/504349/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/35396		vdb-entryx_refsource_BID
http://www.securitytracker.com/id?1022405		vdb-entryx_refsource_SECTRACK
http://www.vupen.com/english/advisories/2009/1608		vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/51169		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jun 16, 2009

Updated Aug 7, 2024

Reserved May 21, 2009

Link CVE-2009-1761

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2009-1761

Red Hat

Severity n/a

Public date n/a

Links CVE-2009-1761