CVE-2008-4399: Input Validation

Published Oct 14, 2008

Updated

Unspecified vulnerability in the database engine service in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to cause a denial of service (crash) via a crafted request, related to "insufficient validation."

Affected Software

7 affected components

Broadcom Arcserve Backup=r12.0

Broadcom Business Protection Suite=r2

Broadcom Server Protection Suite=r2

CA ARCserve Backup=r11.1

CA ARCserve Backup=r11.5

CA Business Protection Suite=r2

Remediation

Patch Available

https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=188143

Event History

Oct 14, 2008

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-4399?

CVE-2008-4399 has a severity rating indicating it can lead to denial of service due to a crash.

How do I fix CVE-2008-4399?

To address CVE-2008-4399, ensure you apply the latest updates and patches provided by Broadcom for affected versions.

Which versions of CA ARCserve Backup are affected by CVE-2008-4399?

CVE-2008-4399 affects CA ARCserve Backup versions r11.1 to r12.0.

Can CVE-2008-4399 be exploited remotely?

Yes, CVE-2008-4399 can be exploited remotely by sending a crafted request to the database engine service.

What impact does CVE-2008-4399 have on systems?

CVE-2008-4399 can cause systems to experience a denial of service, leading to unintended crashes.