← Vulnerability feed

Vulnerability record · CVE-2008-1786 · published 16 April 2008

CVE-2008-1786: Computer associates arcserve backup laptops and desktops code injection vulnerability

Computer Associates · Arcserve Backup Laptops And Desktops

The DSM gui_cm_ctrls ActiveX control (gui_cm_ctrls.ocx), as used in multiple CA products including BrightStor ARCServe Backup for Laptops and Desktops r11.5, Desktop Management Suite r11.1 through r11.2 C2; Unicenter r11.1 through r11.2 C2; and Desktop and Server Management r11.1 through r11.2 C2 allows remote attackers to execute arbitrary code via crafted function arguments.

9.3 CVSS 2.0 High EPSS 6.8% · top 6.2% CWE-94 · Code injection
9.3CVSS 2.0 base score
6.8%EPSS exploitation probability, 30 days
NoNot in CISA KEV
7Affected product versions listed by NVD
18References
16 Jun 2026Last modified by NVD

Description

The DSM gui_cm_ctrls ActiveX control (gui_cm_ctrls.ocx), as used in multiple CA products including BrightStor ARCServe Backup for Laptops and Desktops r11.5, Desktop Management Suite r11.1 through r11.2 C2; Unicenter r11.1 through r11.2 C2; and Desktop and Server Management r11.1 through r11.2 C2 allows remote attackers to execute arbitrary code via crafted function arguments.

AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected products

7 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://community.ca.com/blogs/casecurityresponseblog/archive/2008/04/16/ca-dsm-gui-cm-ctrls-activex-control-vulnerabilit PatchVendor Advisory
http://secunia.com/advisories/29837 Vendor Advisory
http://www.kb.cert.org/vuls/id/684883 US Government Resource
http://www.securityfocus.com/archive/1/490959/100/0/threaded
http://www.securityfocus.com/bid/28809 Patch
http://www.securitytracker.com/id?1019872
http://www.vupen.com/english/advisories/2008/1249/references Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/41853
https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=174256 PatchVendor Advisory
http://community.ca.com/blogs/casecurityresponseblog/archive/2008/04/16/ca-dsm-gui-cm-ctrls-activex-control-vulnerabilit PatchVendor Advisory
http://secunia.com/advisories/29837 Vendor Advisory
http://www.kb.cert.org/vuls/id/684883 US Government Resource
http://www.securityfocus.com/archive/1/490959/100/0/threaded
http://www.securityfocus.com/bid/28809 Patch
http://www.securitytracker.com/id?1019872
http://www.vupen.com/english/advisories/2008/1249/references Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/41853
https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=174256 PatchVendor Advisory

Track CVE-2008-1786 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2008-1329Broadcom desktop management suite vulnerabilityUnspecified vulnerability in the NetBackup service in CA ARCserve Backup for Laptops and Desktops r11.0 through r11.5, and Suite 11.1 and 11.2, allow…EPSS 5.9%9.3CVE-2008-1328Broadcom desktop management suite memory buffer overflow vulnerabilityBuffer overflow in the LGServer service in CA ARCserve Backup for Laptops and Desktops r11.0 through r11.5, and Suite 11.1 and 11.2, allows remote at…EPSS 24%9.3CVE-2008-1472Computer associates brightstor arcserve backup laptops desktops memory buffer overflow vulnerabilityStack-based buffer overflow in the ListCtrl ActiveX Control (ListCtrl.ocx), as used in multiple CA products including BrightStor ARCserve Backup R11.…EPSS 39%8.8CVE-2026-65660Microsoft sharepoint server code injection vulnerabilityImproper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.KEVEPSS 2.1%9.8CVE-2026-60004Gitea diffpatch API code injection enables remote code executionGitea before 1.27.1 allows remote code execution through the diffpatch API by way of Git hook installation. The flaw is a code injection issue (CWE-9…KEVEPSS 24%analysed9.5CVE-2026-72530TrueConf Server sandbox breakout via crafted script code injectionTrueConf Server versions 5.3.X through 5.3.9, 5.4.X through 5.4.9, 5.5.X through 5.5.5 and earlier allow a remote unauthenticated attacker to break o…KEVEPSS 1.7%analysed9.4CVE-2025-62593Ray browser-based RCE via insufficient User-Agent guardRay, an AI compute engine, contains a critical remote code execution flaw before version 2.52.0. Its defense against browser-based attacks relies on …KEVEPSS 62%analysed9.8CVE-2026-9198Langflow auto_login and code validation chain enables unauthenticated RCEIBM Langflow OSS 1.0.0 through 1.10.0 exposes /api/v1/auto_login, which mints SUPERUSER tokens to any network caller, and /api/v1/validate/code, whic…KEVEPSS 29%analysed

Source: NIST National Vulnerability Database (record CVE-2008-1786), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.