CVE-2008-1979 : The Discovery Service (casdscvc) in CA ARCserve Backup 12.0.5454.0 and earlier allows remote attackers to cause a denial

The Discovery Service (casdscvc) in CA ARCserve Backup 12.0.5454.0 and earlier allows remote attackers to cause a denial of service (crash) via a packet with a large integer value used in an increment to TCP port 41523, which triggers a buffer over-read.

Published 2008-04-27 20:05:00

Updated 2021-04-07 18:13:02

Source MITRE

View at NVD, CVE.org

Vulnerability category: Denial of service

Exploit prediction scoring system (EPSS) score for CVE-2008-1979

EPSS FAQ

54.91%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 97 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2008-1979

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:N/A:P	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial

Products affected by CVE-2008-1979

Broadcom » Brightstor Arcserve Backup
Versions up to, including, (<=) 12.0.5454.0
cpe:2.3:a:broadcom:brightstor_arcserve_backup:*:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2008-1979

Exploit prediction scoring system (EPSS) score for CVE-2008-1979

CVSS scores for CVE-2008-1979

CWE ids for CVE-2008-1979

References for CVE-2008-1979

Products affected by CVE-2008-1979