National Cyber-Alert System

Vulnerability Summary for CVE-2008-1786

Overview

The DSM gui_cm_ctrls ActiveX control (gui_cm_ctrls.ocx), as used in multiple CA products including BrightStor ARCServe Backup for Laptops and Desktops r11.5, Desktop Management Suite r11.1 through r11.2 C2; Unicenter r11.1 through r11.2 C2; and Desktop and Server Management r11.1 through r11.2 C2 allows remote attackers to execute arbitrary code via crafted function arguments.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Vulnerability Note: VU#684883

Name: VU#684883

Hyperlink:http://www.kb.cert.org/vuls/id/684883

External Source: CONFIRM

Name: https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=174256

Type: Advisory; Patch Information

Hyperlink:https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=174256

External Source: BID

Name: 28809

Type: Patch Information

Hyperlink:http://www.securityfocus.com/bid/28809

External Source: CONFIRM

Name: http://community.ca.com/blogs/casecurityresponseblog/archive/2008/04/16/ca-dsm-gui-cm-ctrls-activex-control-vulnerability.aspx

Type: Advisory; Patch Information

Hyperlink:http://community.ca.com/blogs/casecurityresponseblog/archive/2008/04/16/ca-dsm-gui-cm-ctrls-activex-control-vulnerability.aspx

External Source: XF

Name: ca-dsmguicmctrls-code-execution(41853)

Hyperlink:http://xforce.iss.net/xforce/xfdb/41853

External Source: SECTRACK

Name: 1019872

Hyperlink:http://www.securitytracker.com/id?1019872

External Source: BUGTRAQ

Name: 20080416 CA DSM gui_cm_ctrls ActiveX Control Vulnerability

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/490959/100/0/threaded

External Source: VUPEN

Name: ADV-2008-1249

Type: Advisory

Hyperlink:http://www.frsirt.com/english/advisories/2008/1249/references

External Source: SECUNIA

Name: 29837

Type: Advisory

Hyperlink:http://secunia.com/advisories/29837