CVE-2008-4397: Path Traversal

Published Oct 14, 2008

Updated

Directory traversal vulnerability in the RPC interface (asdbapi.dll) in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to execute arbitrary commands via a .. (dot dot) in an RPC call with opnum 0x10A.

Affected Software

7 affected components

CA Business Protection Suite=r2

CA ARCserve Backup=r11.1

CA Business Protection Suite=r2

CA ARCserve Backup=r11.5

Broadcom Arcserve Backup=r12.0

Broadcom Business Protection Suite=r2

Broadcom Server Protection Suite=r2

Remediation

Patch Available

https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=188143

Event History

Oct 14, 2008

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-4397?

CVE-2008-4397 is considered a high severity vulnerability due to its potential for remote code execution.

How do I fix CVE-2008-4397?

To mitigate CVE-2008-4397, it is recommended to apply the latest patches provided by CA for the affected versions of ARCserve Backup.

What software is affected by CVE-2008-4397?

CVE-2008-4397 affects CA ARCserve Backup versions r11.1 through r12.0, along with specific editions of the Business Protection Suite.

Can CVE-2008-4397 be exploited remotely?

Yes, CVE-2008-4397 can be exploited remotely by attackers utilizing a malicious RPC call with directory traversal techniques.

What types of attacks can be performed using CVE-2008-4397?

CVE-2008-4397 allows attackers to execute arbitrary commands on the affected systems, leading to potential unauthorized access or data loss.