CVE-2009-1761| Date: (C)2009-06-16 (M)2017-08-18 |
| |
| CVSS Score: 5.0 | Access Vector: NETWORK |
| Exploitability Subscore: 10.0 | Access Complexity: LOW |
| Impact Subscore: 2.9 | Authentication: NONE |
| | Confidentiality: NONE |
| | Integrity: NONE |
| | Availability: PARTIAL |
The message engine in CA ARCserve Backup r12.0 and r12.0 SP1 for Windows allows remote attackers to cause a denial of service (crash) via (1) an invalid 0x13 message, which is not properly handled in the ASCORE module, or (2) a 0x3B message with invalid stub data that triggers an RPC marshalling error.
