CVE-2009-1761: ca arcserve_backup Improper Input Validation

Vulnerability summary

CVE-2009-1761 is a medium (CVSS 5.0) Improper Input Validation vulnerability in ca arcserve_backup. EPSS estimates a 2.23% chance of exploitation in the next 30 days, higher than 82.5% of scored vulnerabilities. 2 public exploits are recorded.

Timeline

1. 16-06-2009
   PublishedVulnerability first disclosed.
2. 07-08-2024
   Last modifiedVulnerability information updated.

Description

The message engine in CA ARCserve Backup r12.0 and r12.0 SP1 for Windows allows remote attackers to cause a denial of service (crash) via (1) an invalid 0x13 message, which is not properly handled in the ASCORE module, or (2) a 0x3B message with invalid stub data that triggers an RPC marshalling error.

• CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.