Lucene search

MitreCVE-2008-4399

HistoryOct 14, 2008 - 9:10 p.m.

CVE-2008-4399

2008-10-1421:10:35

CWE-20

mitre

web.nvd.nist.gov

ca arcserve backup

vulnerability

denial of service

remote attackers

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.3

Confidence

High

EPSS

0.884

Percentile

98.8%

JSON

Unspecified vulnerability in the database engine service in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to cause a denial of service (crash) via a crafted request, related to “insufficient validation.”

Affected configurations

Nvd

Node

broadcomarcserve_backupMatchr12.0

broadcombusiness_protection_suiteMatchr2

broadcomserver_protection_suiteMatchr2

caarcserve_backupMatchr11.1

caarcserve_backupMatchr11.5

cabusiness_protection_suiteMatchr2microsoft_small_business_server_premium

cabusiness_protection_suiteMatchr2microsoft_small_business_server_standard

VendorProductVersionCPE
broadcomarcserve_backupr12.0cpe:2.3:a:broadcom:arcserve_backup:r12.0:*:*:*:*:*:*:*
broadcombusiness_protection_suiter2cpe:2.3:a:broadcom:business_protection_suite:r2:*:*:*:*:*:*:*
broadcomserver_protection_suiter2cpe:2.3:a:broadcom:server_protection_suite:r2:*:*:*:*:*:*:*
caarcserve_backupr11.1cpe:2.3:a:ca:arcserve_backup:r11.1:*:*:*:*:*:*:*
caarcserve_backupr11.5cpe:2.3:a:ca:arcserve_backup:r11.5:*:*:*:*:*:*:*
cabusiness_protection_suiter2cpe:2.3:a:ca:business_protection_suite:r2:*:microsoft_small_business_server_premium:*:*:*:*:*
cabusiness_protection_suiter2cpe:2.3:a:ca:business_protection_suite:r2:*:microsoft_small_business_server_standard:*:*:*:*:*

Vendor	Product	Version	CPE
broadcom	arcserve_backup	r12.0	cpe:2.3:a:broadcom:arcserve_backup:r12.0:::::::*
broadcom	business_protection_suite	r2	cpe:2.3:a:broadcom:business_protection_suite:r2:::::::*
broadcom	server_protection_suite	r2	cpe:2.3:a:broadcom:server_protection_suite:r2:::::::*
ca	arcserve_backup	r11.1	cpe:2.3:a:ca:arcserve_backup:r11.1:::::::*
ca	arcserve_backup	r11.5	cpe:2.3:a:ca:arcserve_backup:r11.5:::::::*
ca	business_protection_suite	r2	cpe:2.3:a:ca:business_protection_suite:r2::microsoft_small_business_server_premium:::::
ca	business_protection_suite	r2	cpe:2.3:a:ca:business_protection_suite:r2::microsoft_small_business_server_standard:::::

References

secunia.com/advisories/32220

www.securityfocus.com/archive/1/497218

www.securityfocus.com/bid/31684

www.securitytracker.com/id?1021032

www.vupen.com/english/advisories/2008/2777

exchange.xforce.ibmcloud.com/vulnerabilities/45776

support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=188143

Social References

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.3

Confidence

High

EPSS

0.884

Percentile

98.8%

JSON

Related for CVE-2008-4399