CVE-2008-1786

Published: Apr 16, 2008Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

The DSM gui_cm_ctrls ActiveX control (gui_cm_ctrls.ocx), as used in multiple CA products including BrightStor ARCServe Backup for Laptops and Desktops r11.5, Desktop Management Suite r11.1 through r11.2 C2; Unicenter r11.1 through r11.2 C2; and Desktop and Server Management r11.1 through r11.2 C2 allows remote attackers to execute arbitrary code via crafted function arguments.

Affected (30)

Products: Computer Associates: Arcserve Backup Laptops And Desktops, Desktop And Server Management, Desktop Management Suite, Unicenter Asset Management, Unicenter Desktop Management Bundle, Unicenter Remote Control, Unicenter Software Delivery

Computer Associates

7 products

Arcserve Backup Laptops And Desktops

Desktop And Server Management

Desktop Management Suite

Unicenter Asset Management

Unicenter Desktop Management Bundle

Unicenter Remote Control

Unicenter Software Delivery

Configuration A

30 vulnerable

Vulnerable Software	Affected Versions
Computer Associates Arcserve Backup Laptops And Desktops	Version r11.5
Computer Associates Desktop And Server Management	Version r11.1
Computer Associates Desktop And Server Management	Version r11.2
Computer Associates Desktop And Server Management	Version r11.2a
Computer Associates Desktop And Server Management	Version r11.2c1
Computer Associates Desktop And Server Management	Version r11.2c2
Computer Associates Desktop Management Suite	Version r11.2
Computer Associates Desktop Management Suite	Version r11.2a
Computer Associates Desktop Management Suite	Version r11.2c1
Computer Associates Desktop Management Suite	Version r11.2c2
Computer Associates Unicenter Asset Management	Version r11.1
Computer Associates Unicenter Asset Management	Version r11.2
Computer Associates Unicenter Asset Management	Version r11.2a
Computer Associates Unicenter Asset Management	Version r11.2c1
Computer Associates Unicenter Asset Management	Version r11.2c2
Computer Associates Unicenter Desktop Management Bundle	Version r11.1
Computer Associates Unicenter Desktop Management Bundle	Version r11.2
Computer Associates Unicenter Desktop Management Bundle	Version r11.2a
Computer Associates Unicenter Desktop Management Bundle	Version r11.2c1
Computer Associates Unicenter Desktop Management Bundle	Version r11.2c2
Computer Associates Unicenter Remote Control	Version r11.1
Computer Associates Unicenter Remote Control	Version r11.2
Computer Associates Unicenter Remote Control	Version r11.2a
Computer Associates Unicenter Remote Control	Version r11.2c1
Computer Associates Unicenter Remote Control	Version r11.2c2
Computer Associates Unicenter Software Delivery	Version r11.1
Computer Associates Unicenter Software Delivery	Version r11.2
Computer Associates Unicenter Software Delivery	Version r11.2a
Computer Associates Unicenter Software Delivery	Version r11.2c1
Computer Associates Unicenter Software Delivery	Version r11.2c2