Vulnerability in N/a
CVE-2008-4397
Directory traversal vulnerability in the RPC interface (asdbapi.dll) in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to execute arbitrary commands via a .. (dot dot) in an RPC call wi…
EPSS: 0.858 (99.4th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- 31684 (vdb-entry, x_refsource_BID)
- ca-arcservebackup-message-command-execution(45774) (vdb-entry, x_refsource_XF)
- ADV-2008-2777 (vdb-entry, x_refsource_VUPEN)
- 1021032 (vdb-entry, x_refsource_SECTRACK)
- 20081011 CA BrightStor ARCServe BackUp Message Engine Remote Command Injection Vulnerability (mailing-list, x_refsource_BUGTRAQ)
- support.ca.com/irj/portal/anonymous/phpsupcontent (x_refsource_CONFIRM)
- 32220 (x_refsource_SECUNIA, third-party-advisory)
- 20081009 CA ARCserve Backup Multiple Vulnerabilities (mailing-list, x_refsource_BUGTRAQ)
- 4412 (x_refsource_SREASON, third-party-advisory)
Frequently asked questions
- What is CVE-2008-4397?
- CVE-2008-4397 is a vulnerability in N/a. Published 2008-10-14.
- Is CVE-2008-4397 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.