Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
10
CVSSv2

CVE-2008-4397

Published: 14/10/2008 Updated: 09/04/2021
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 1000
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Subscribe to Server Protection Suite

Vulnerability Summary

Directory traversal vulnerability in the RPC interface (asdbapi.dll) in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote malicious users to execute arbitrary commands via a .. (dot dot) in an RPC call with opnum 0x10A.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

broadcom server protection suite r2

broadcom business protection suite r2

ca arcserve backup r11.1

ca arcserve backup r11.5

broadcom arcserve backup r12.0

ca business protection suite r2

Exploits

Exploit DB: Computer Associates ARCserve - REPORTREMOTEEXECUTECML Buffer Overflow (Metasploit)
## # $Id: ca_arcserve_342rb 9179 2010-04-30 08:40:19Z jduck $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' class ...
Exploit DB: cabrightstor-exec.txt
CA BrightStor ARCServe BackUp is an overall data backup solution The RPC interface of CA BrightStor ARCServe BackUp does not handle user's input exactly that allows anonymous attacker to inject any command, a remote code execution attack may achieved through this way Details are provided CA BrightStor ARCServe BackUp version R115 is affected ...

References

CWE-22CWE-20https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=188143http://www.securitytracker.com/id?1021032http://www.securityfocus.com/bid/31684http://www.securityfocus.com/archive/1/497218http://secunia.com/advisories/32220http://securityreason.com/securityalert/4412http://www.vupen.com/english/advisories/2008/2777https://exchange.xforce.ibmcloud.com/vulnerabilities/45774http://www.securityfocus.com/archive/1/497281/100/0/threadedhttps://nvd.nist.govhttps://www.exploit-db.com/exploits/16404/
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4644unprivilegedCVE-2024-3494CVE-2024-22460CVE-2024-26026CVE-2024-23473firewallCVE-2024-28889XML external entity
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook