« Volver al listado

CVE-2010-3984

Estado: ModificadaAlta (7.5)—

Buffer overflow in mng_core_com.dll in CA XOsoft Replication r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft High Availability r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft Content Distribution r12.0 SP1 and r12.5 SP2 rollup, and CA ARCserve Replication and High Availability (RHA) r15.0 SP1 allows remote attackers to execute arbitrary code via a crafted create_session_bab operation in a SOAP request to xosoapapi.asmx.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (4)

CA — Arcserve Replication AND High AvailabilityCA — Xosoft Content DistributionCA — Xosoft High AvailabilityCA — Xosoft Replication

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2010-3984",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2011-01-07T23:00:19.063",
  "references": [
    {
      "url": "http://secunia.com/advisories/42561",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/515115/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/45317",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securitytracker.com/id?1024852",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.zerodayinitiative.com/advisories/ZDI-10-263/",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7bFEB41CE8-5023-46DF-B257-5299F492BF23%7d",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/42561",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/515115/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/45317",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1024852",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.zerodayinitiative.com/advisories/ZDI-10-263/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7bFEB41CE8-5023-46DF-B257-5299F492BF23%7d",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in mng_core_com.dll in CA XOsoft Replication r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft High Availability r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft Content Distribution r12.0 SP1 and r12.5 SP2 rollup, and CA ARCserve Replication and High Availability (RHA) r15.0 SP1 allows remote attackers to execute arbitrary code via a crafted create_session_bab operation in a SOAP request to xosoapapi.asmx."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de búfer en mng_core_com.dll en CA XOsoft Replication r12.0 SP1 y r12.5 SP2 rollup, CA XOsoft High Availability r12.0 SP1 y r12.5 SP2 rollup, CA XOsoft Content Distribution r12.0 SP1 y r12.5 SP2 rollup, y CA ARCserve Replication y High Availability (RHA) r15.0 SP1, permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) o posiblemente la ejecución de código de su elección a través de una operación create_sessión_bab en una petición SOAP sobre xosoapapi.asmx\r\n"
    }
  ],
  "lastModified": "2026-06-16T23:23:56.587",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ca:arcserve_replication_and_high_availability:r15.0:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EF05232F-A8EC-4EFF-A3F8-1B22387A5E57"
            },
            {
              "criteria": "cpe:2.3:a:ca:xosoft_content_distribution:r12.0:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BC02D19D-AB8C-44F1-8990-7A9528771C3B"
            },
            {
              "criteria": "cpe:2.3:a:ca:xosoft_content_distribution:r12.5:sp2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A4D1FAB5-AC5B-4144-98F6-328F2647DDD3"
            },
            {
              "criteria": "cpe:2.3:a:ca:xosoft_high_availability:r12.0:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EA91F248-8791-4586-B063-1AFA20DACC68"
            },
            {
              "criteria": "cpe:2.3:a:ca:xosoft_high_availability:r12.5:sp2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F1AC1B03-3698-4744-A71C-B529E09B494E"
            },
            {
              "criteria": "cpe:2.3:a:ca:xosoft_replication:r12.0:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "89CEAA53-1BC8-4AB9-BE1A-182C99EABEB8"
            },
            {
              "criteria": "cpe:2.3:a:ca:xosoft_replication:r12.5:sp2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6207F39D-92E6-440F-849D-692E39CCD9EE"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}