The LDBserver service in the server in CA ARCserve Backup 11.1 through 12.0 on Windows allows remote attackers to execute arbitrary code via a handle_t argument to an RPC endpoint in which the argument refers to an incompatible procedure.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Arcserve_backup | Broadcom | r12.0 (including) | r12.0 (including) |
| Arcserve_backup | Ca | r11.1 (including) | r11.1 (including) |
| Arcserve_backup | Ca | r11.5 (including) | r11.5 (including) |