Vulnerability in Broadcom Arcserve_backup

CVE-2001-1346

Computer Associates ARCserveIT 6.61 and 6.63 (also called ARCservIT) allows local users to overwrite arbitrary files via a symlink attack on the temporary files (1) asagent.tmp or (2) inetd.tmp.

EPSS: 0.006 (45.1th percentile) — read the EPSS interpretation.

Affected products

Broadcom Arcserve_backup — versions 6.61
Ca Arcserve_backup — versions 6.63
N/a — versions n/a

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (vdb-entry, x_refsource_BID)