CVE-2008-4400: Input Validation

Published Oct 14, 2008

Updated

Unspecified vulnerability in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to cause a denial of service (crash of multiple services) via crafted authentication credentials, related to "insufficient validation."

Affected Software

7 affected components

Broadcom Arcserve Backup=r12.0

Broadcom Business Protection Suite=r2

Broadcom Server Protection Suite=r2

CA ARCserve Backup=r11.1

CA ARCserve Backup=r11.5

CA Business Protection Suite=r2

Remediation

Patch Available

https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=188143

Event History

Oct 14, 2008

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-4400?

CVE-2008-4400 is considered to have a moderate severity as it can lead to a denial of service by crashing multiple services.

How do I fix CVE-2008-4400?

To fix CVE-2008-4400, you should apply the latest patches and updates provided by Broadcom for the affected versions of CA ARCserve Backup.

What services are affected by CVE-2008-4400?

CVE-2008-4400 affects multiple services in CA ARCserve Backup, which can crash due to crafted authentication credentials.

What versions of CA ARCserve Backup are affected by CVE-2008-4400?

CVE-2008-4400 affects CA ARCserve Backup versions r11.1 through r12.0 and related products such as Business Protection Suite.

Can CVE-2008-4400 be exploited remotely?

Yes, CVE-2008-4400 can be exploited by remote attackers using crafted authentication credentials.