CVE-2008-1979: The Discovery Service (casdscvc) in CA ARCserve Backup 12.0.5454.0 and earlier allows remote attackers to c...

Security readout for executives and security teams

This is an old remote denial-of-service issue in CA ARCserve Backup. A network-reachable Discovery Service can be crashed, potentially disrupting backup discovery or related backup operations. The supplied sources do not show data theft, code execution, a CVSS score, or active exploitation. Exposure is most likely on legacy CA ARCserve Backup 12.0.5454.0 or earlier systems where the Discovery Service is installed and reachable, especially if TCP 41523 is accessible beyond trusted backup management networks. Prioritize if legacy ARCserve supports business-critical backups or is reachable from broad internal networks. Business risk is service disruption, not proven compromise, based on the supplied evidence. Mitigation focus: Identify CA ARCserve Backup 12.0.5454.0 or earlier installations.; Check current vendor guidance for supported fixes or upgrade paths.; Restrict TCP 41523 to trusted backup management hosts only..

Prepared

Jun 28, 2026, 19:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.