CVE-2008-2241

2008-05-2113:24:00

CWE-22

mitre

web.nvd.nist.gov

cve-2008-2241

directory traversal vulnerability

ca brightstor arcserve backup

remote attackers

code execution

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.2

Confidence

Low

EPSS

0.331

Percentile

97.1%

JSON

Directory traversal vulnerability in caloggerd in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allows remote attackers to append arbitrary data to arbitrary files via directory traversal sequences in unspecified input fields, which are used in log messages. NOTE: this can be leveraged for code execution in many installation environments by writing to a startup file or configuration file.

Affected configurations

Nvd

Node

broadcombrightstor_arcserve_backupMatch11.1

broadcombrightstor_arcserve_backupMatch11.5

broadcomserver_protection_suiteMatch2

cabrightstor_arcserve_backupMatch11.0

cabrightstor_arcserve_backupMatchr11.0

cabusiness_protection_suiteMatch2.0microsoft_small_business_server_premium

cabusiness_protection_suiteMatch2.0microsoft_small_business_server_standard

VendorProductVersionCPE
broadcombrightstor_arcserve_backup11.1cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1:*:*:*:*:*:*:*
broadcombrightstor_arcserve_backup11.5cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.5:*:*:*:*:*:*:*
broadcomserver_protection_suite2cpe:2.3:a:broadcom:server_protection_suite:2:*:*:*:*:*:*:*
cabrightstor_arcserve_backup11.0cpe:2.3:a:ca:brightstor_arcserve_backup:11.0:*:*:*:*:*:*:*
cabrightstor_arcserve_backupr11.0cpe:2.3:a:ca:brightstor_arcserve_backup:r11.0:*:*:*:*:*:*:*
cabusiness_protection_suite2.0cpe:2.3:a:ca:business_protection_suite:2.0:*:microsoft_small_business_server_premium:*:*:*:*:*
cabusiness_protection_suite2.0cpe:2.3:a:ca:business_protection_suite:2.0:*:microsoft_small_business_server_standard:*:*:*:*:*

Vendor	Product	Version	CPE
broadcom	brightstor_arcserve_backup	11.1	cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1:::::::*
broadcom	brightstor_arcserve_backup	11.5	cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.5:::::::*
broadcom	server_protection_suite	2	cpe:2.3:a:broadcom:server_protection_suite:2:::::::*
ca	brightstor_arcserve_backup	11.0	cpe:2.3:a:ca:brightstor_arcserve_backup:11.0:::::::*
ca	brightstor_arcserve_backup	r11.0	cpe:2.3:a:ca:brightstor_arcserve_backup:r11.0:::::::*
ca	business_protection_suite	2.0	cpe:2.3:a:ca:business_protection_suite:2.0::microsoft_small_business_server_premium:::::
ca	business_protection_suite	2.0	cpe:2.3:a:ca:business_protection_suite:2.0::microsoft_small_business_server_standard:::::