CVE:CVE-2010-3984
CNNVD:CNNVD-201101-069
CA XOsoft Replication r12.0 SP1及r12.5 SP2 rollup版本，CA XOsoft High Availability r12.0 SP1及r12.5 SP2 rollup版本，CA XOsoft Content Distribution r12.0 SP1及r12.5 SP2 rollup版本，及CA ARCserve Replication和High Availability (RHA) r15.0 SP1版本中的mng_core_com.dll文件中存在缓冲区溢出漏洞。远程攻击者可以借助对xosoapapi.asmx的SOAP请求中的特制create_session_bab操作执行任意代码。
solution:Upgrade ca arcserve_replication_and_high_availability to a higher version than r15.0:sp1,and avoid the version r15.0:sp1; Upgrade ca xosoft_content_distribution to a higher version than r12.0:sp1,r12.5:sp2,and avoid the version r12.0:sp1,r12.5:sp2; Upgrade ca xosoft_high_availability to a higher version than r12.0:sp1,r12.5:sp2,and avoid the version r12.0:sp1,r12.5:sp2; Upgrade ca xosoft_replication to a higher version than r12.0:sp1,r12.5:sp2,and avoid the version r12.0:sp1,r12.5:sp2