Technical Description

A vulnerability has been identified in CA ARCserve Backup for Laptops and Desktops, CA Desktop Management Suite and CA Protection Suites, which could be exploited by attackers to cause a denial of service or compromise a vulnerable system. This issue is caused by an integer underflow error in the LGServer service when processing malformed requests sent to port 1900/TCP, which could be exploited by remote attackers to crash an affected service or execute arbitrary code.

Affected Products

CA ARCserve Backup for Laptops and Desktops r11.5
CA ARCserve Backup for Laptops and Desktops r11.1 SP2
CA ARCserve Backup for Laptops and Desktops r11.1 SP1
CA ARCserve Backup for Laptops and Desktops r11.1
CA ARCserve Backup for Laptops and Desktops r11.0
CA Desktop Management Suite 11.2
CA Desktop Management Suite 11.1
CA Protection Suites r2
CA Protection Suites 3.0
CA Protection Suites 3.1

Solution

CA ARCserve Backup for Laptops and Desktops 11.1, 11.1 SP1, 11.1 SP2 - Upgrade to 11.1 SP2 and apply patch :
https://support.ca.com/irj/portal/anonymous/redirArticles?reqPage=search&searchID=RO00912

Apply patch for CA ARCserve Backup for Laptops and Desktops 11.5 :
https://support.ca.com/irj/portal/anonymous/redirArticles?reqPage=search&searchID=RO00913

Apply patch for CA Protection Suites 3.0 :
https://support.ca.com/irj/portal/anonymous/redirArticles?reqPage=search&searchID=RO00912

Apply patch for CA Protection Suites 3.1 :
https://support.ca.com/irj/portal/anonymous/redirArticles?reqPage=search&searchID=RO00912

CA Desktop Management Suite 11.2 - Upgrade to CA Desktop Management Suite 11.2 C1 and apply patch :
https://support.ca.com/irj/portal/anonymous/redirArticles?reqPage=search&searchID=RO00913

Apply patch for CA Desktop Management Suite 11.1 :
https://support.ca.com/irj/portal/anonymous/redirArticles?reqPage=search&searchID=RO01150

CA ARCserve Backup for Laptops and Desktops 11.0 - Upgrade to ARCserve Backup for Laptops and Desktops version 11.1 SP2 and apply the latest patches :
https://support.ca.com/irj/portal/anonymous/redirArticles?reqPage=search&searchID=QI85497

References

http://www.vupen.com/english/advisories/2008/2286
https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=181721

Credits

Vulnerability reported by Vulnerability Research Team (Assurent Secure Technologies).

ChangeLog

2008-08-04 : Initial release

Vulnerability Management

Subscribe to VUPEN VNS and receive real-time e-mail and SMS alerts when new advisories or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.