CVE-2008-3175: Integer underflow in rxRPC.dll in the LGServer service in the server in CA ARCserve Backup for Laptops and...

Security readout for executives and security teams

This is an old remote code execution and denial-of-service flaw in CA ARCserve Backup for Laptops and Desktops. A specially crafted message to the LGServer service can trigger memory corruption. The business risk matters mainly where legacy versions 11.0 through 11.5 remain installed and reachable on the network. Exposure is limited to environments still running CA ARCserve Backup for Laptops and Desktops 11.0 through 11.5, especially servers where LGServer is reachable by untrusted systems. The source bundle does not identify affected CPEs or deployment prevalence. Treat this as high priority if the legacy product is still in production or reachable from broad internal networks. For organizations without this specific CA ARCserve product, urgency is low after inventory confirms absence. Mitigation focus: Check CA/Broadcom vendor guidance for the confirmed advisory and supported remediation path.; Upgrade or retire affected 11.0 through 11.5 installations where still present.; Restrict LGServer network access to trusted backup clients and administration segments..

Prepared

Jun 28, 2026, 18:33 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.