CVE-2009-1761
ca arcserve backup: no CVSS score yet. EPSS 2.2% chance of exploitation in the next 30 days.
The message engine in CA ARCserve Backup r12.0 and r12.0 SP1 for Windows allows remote attackers to cause a denial of service (crash) via (1) an invalid 0x13 message, which is not properly handled in the ASCORE module, or (2) a 0x3B message with invalid stub data that triggers an RPC marshalling error.
- EPSS
- 2.2% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ca:arcserve_backup
References
- http://community.ca.com/blogs/casecurityresponseblog/archive/2009/06/15/ca20090615-01-ca-arcserve-backup-message-engine-denial-of-service-vulnerabilities.aspx
- http://secunia.com/advisories/35473
- http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=209502
- http://www.ivizsecurity.com/security-advisory-iviz-sr-09003.html
- http://www.ivizsecurity.com/security-advisory-iviz-sr-09004.html