CVE-2012-2972

Description

The (1) server and (2) agent components in CA ARCserve Backup r12.5, r15, and r16 on Windows do not properly validate RPC requests, which allows remote attackers to cause a denial of service (service crash) via a crafted request.

References

https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7BF9EEA31E-8089-423E-B746-41B5C9DD2AC1%7D

https://exchange.xforce.ibmcloud.com/vulnerabilities/79477

http://www.kb.cert.org/vuls/id/408099

http://secunia.com/advisories/51012

http://seclists.org/fulldisclosure/2013/Jan/86

http://packetstormsecurity.com/files/119543/Security-Notice-For-CA-ARCserve-Backup.html

http://osvdb.org/86415

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS