Vulnerability Description
Buffer overflow in mng_core_com.dll in CA XOsoft Replication r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft High Availability r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft Content Distribution r12.0 SP1 and r12.5 SP2 rollup, and CA ARCserve Replication and High Availability (RHA) r15.0 SP1 allows remote attackers to execute arbitrary code via a crafted create_session_bab operation in a SOAP request to xosoapapi.asmx.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ca | Arcserve Replication And High Availability | r15.0 |
| Ca | Xosoft Content Distribution | r12.0 |
| Ca | Xosoft High Availability | r12.0 |
| Ca | Xosoft Replication | r12.0 |
Related Weaknesses (CWE)
References
- http://secunia.com/advisories/42561Vendor Advisory
- http://www.securityfocus.com/archive/1/515115/100/0/threaded
- http://www.securityfocus.com/bid/45317
- http://www.securitytracker.com/id?1024852
- http://www.zerodayinitiative.com/advisories/ZDI-10-263/
- https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7bFEB41CE8-Vendor Advisory
- http://secunia.com/advisories/42561Vendor Advisory
- http://www.securityfocus.com/archive/1/515115/100/0/threaded
- http://www.securityfocus.com/bid/45317
- http://www.securitytracker.com/id?1024852
- http://www.zerodayinitiative.com/advisories/ZDI-10-263/
- https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7bFEB41CE8-Vendor Advisory
FAQ
What is CVE-2010-3984?
CVE-2010-3984 is a vulnerability with a CVSS score of 7.5 (HIGH). Buffer overflow in mng_core_com.dll in CA XOsoft Replication r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft High Availability r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft Content Distribution r12.0 SP1 and r1...
How severe is CVE-2010-3984?
CVE-2010-3984 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2010-3984?
Check the references section above for vendor advisories and patch information. Affected products include: Ca Arcserve Replication And High Availability, Ca Xosoft Content Distribution, Ca Xosoft High Availability, Ca Xosoft Replication.