CVE-2010-3984

published 2011-01-07

CVE-2010-3984: Buffer overflow in mng_core_com.dll in CA XOsoft Replication r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft High Availability r12.0 SP1 and r12.5 SP2 rollup, CA…

Priority P3 45 high 7.5 CVSS 2.0

AV N AC L Au N C P I P A P

Buffer overflow in mng_core_com.dll in CA XOsoft Replication r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft High Availability r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft Content Distribution r12.0 SP1 and r12.5 SP2 rollup, and CA ARCserve Replication and High Availability (RHA) r15.0 SP1 allows remote attackers to execute arbitrary code via a crafted create_session_bab operation in a SOAP request to xosoapapi.asmx.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
ca	arcserve_replication_and_high_availability	—	—
ca	xosoft_content_distribution	—	—
ca	xosoft_content_distribution	—	—
ca	xosoft_high_availability	—	—
ca	xosoft_high_availability	—	—
ca	xosoft_replication	—	—
ca	xosoft_replication	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-119