CVE-2008-4398: Input Validation

Published Oct 14, 2008

Updated

Unspecified vulnerability in the tape engine service in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to cause a denial of service (crash) via a crafted request.

Affected Software

7 affected components

Broadcom Arcserve Backup=r12.0

Broadcom Business Protection Suite=r2

Broadcom Server Protection Suite=r2

CA ARCserve Backup=r11.1

CA ARCserve Backup=r11.5

CA Business Protection Suite=r2

Remediation

Patch Available

https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=188143

Event History

Oct 14, 2008

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-4398?

CVE-2008-4398 is classified as a denial of service vulnerability that can cause a crash in affected applications.

How do I fix CVE-2008-4398?

To mitigate CVE-2008-4398, it is recommended to upgrade to a patched version of CA ARCserve Backup or related software.

What are the affected versions in CVE-2008-4398?

CVE-2008-4398 affects CA ARCserve Backup versions r11.1 through r12.0 and related Broadcom products.

Can CVE-2008-4398 be exploited remotely?

Yes, CVE-2008-4398 can be exploited remotely through crafted requests sent to the tape engine service.

What is the impact of exploiting CVE-2008-4398?

Exploiting CVE-2008-4398 can lead to a denial of service, causing the application to crash and become unavailable.