CVE-2008-4397

2008-10-1421:10:35

CWE-20

CWE-22

mitre

web.nvd.nist.gov

security

vulnerability

directory traversal

ca arcserve backup

remote attackers

arbitrary commands

nvd

cve-2008-4397

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.3

Confidence

Low

EPSS

0.891

Percentile

98.7%

JSON

Directory traversal vulnerability in the RPC interface (asdbapi.dll) in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to execute arbitrary commands via a … (dot dot) in an RPC call with opnum 0x10A.

Affected configurations

Nvd

Node

broadcomarcserve_backupMatchr12.0

broadcombusiness_protection_suiteMatchr2

broadcomserver_protection_suiteMatchr2

caarcserve_backupMatchr11.1

caarcserve_backupMatchr11.5

cabusiness_protection_suiteMatchr2microsoft_small_business_server_premium

cabusiness_protection_suiteMatchr2microsoft_small_business_server_standard

VendorProductVersionCPE
broadcomarcserve_backupr12.0cpe:2.3:a:broadcom:arcserve_backup:r12.0:*:*:*:*:*:*:*
broadcombusiness_protection_suiter2cpe:2.3:a:broadcom:business_protection_suite:r2:*:*:*:*:*:*:*
broadcomserver_protection_suiter2cpe:2.3:a:broadcom:server_protection_suite:r2:*:*:*:*:*:*:*
caarcserve_backupr11.1cpe:2.3:a:ca:arcserve_backup:r11.1:*:*:*:*:*:*:*
caarcserve_backupr11.5cpe:2.3:a:ca:arcserve_backup:r11.5:*:*:*:*:*:*:*
cabusiness_protection_suiter2cpe:2.3:a:ca:business_protection_suite:r2:*:microsoft_small_business_server_premium:*:*:*:*:*
cabusiness_protection_suiter2cpe:2.3:a:ca:business_protection_suite:r2:*:microsoft_small_business_server_standard:*:*:*:*:*

Vendor	Product	Version	CPE
broadcom	arcserve_backup	r12.0	cpe:2.3:a:broadcom:arcserve_backup:r12.0:::::::*
broadcom	business_protection_suite	r2	cpe:2.3:a:broadcom:business_protection_suite:r2:::::::*
broadcom	server_protection_suite	r2	cpe:2.3:a:broadcom:server_protection_suite:r2:::::::*
ca	arcserve_backup	r11.1	cpe:2.3:a:ca:arcserve_backup:r11.1:::::::*
ca	arcserve_backup	r11.5	cpe:2.3:a:ca:arcserve_backup:r11.5:::::::*
ca	business_protection_suite	r2	cpe:2.3:a:ca:business_protection_suite:r2::microsoft_small_business_server_premium:::::
ca	business_protection_suite	r2	cpe:2.3:a:ca:business_protection_suite:r2::microsoft_small_business_server_standard:::::