Back to search
CVE-2010-3984
Published: Jan 7, 2011
Modified: Aug 7, 2024
PUBLISHED
Description
Buffer overflow in mng_core_com.dll in CA XOsoft Replication r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft High Availability r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft Content Distribution r12.0 SP1 and r12.5 SP2 rollup, and CA ARCserve Replication and High Availability (RHA) r15.0 SP1 allows remote attackers to execute arbitrary code via a crafted create_session_bab operation in a SOAP request to xosoapapi.asmx.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
42561
third-party-advisory
x_refsource_SECUNIA
http://www.zerodayinitiative.com/advisories/ZDI-10-263/
x_refsource_MISC
20101209 CA20101209-01: Security Notice for CA XOsoft
mailing-list
x_refsource_BUGTRAQ
45317
vdb-entry
x_refsource_BID
1024852
vdb-entry
x_refsource_SECTRACK
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now