CVE-2008-4397 EXPLOIT
10.0
HIGH · CVSS 2.0 · EPSS 80.5% (pctl 100)
Patch early
A public exploit exists.
Description
Directory traversal vulnerability in the RPC interface (asdbapi.dll) in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to execute arbitrary commands via a .. (dot dot) in an RPC call with opnum 0x10A.
Scoring
| CVSS | 10.0 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
| EPSS | 80.54% — more likely to be exploited than 100% of all CVEs |
| Weakness | CWE-20 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2008-10-14 |
| Last modified | 2026-06-16 |
Affected (5)
| Vendor | Product |
|---|---|
| broadcom | arcserve backup |
| broadcom | business protection suite |
| broadcom | server protection suite |
| ca | arcserve backup |
| ca | business protection suite |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Computer Associates ARCserve - REPORTREMOTEEXECUTECML Buffer Overflow (Metasploit) | 2010-04-30 |
References
- http://secunia.com/advisories/32220
- http://securityreason.com/securityalert/4412
- http://www.securityfocus.com/archive/1/497218
- http://www.securityfocus.com/archive/1/497281/100/0/threaded
- http://www.securityfocus.com/bid/31684
- http://www.securitytracker.com/id?1021032
- http://www.vupen.com/english/advisories/2008/2777
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45774
- https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=188143
- http://secunia.com/advisories/32220
- http://securityreason.com/securityalert/4412
- http://www.securityfocus.com/archive/1/497218
- http://www.securityfocus.com/archive/1/497281/100/0/threaded
- http://www.securityfocus.com/bid/31684
- http://www.securitytracker.com/id?1021032
- http://www.vupen.com/english/advisories/2008/2777
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45774
- https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=188143
→ the Explorer · watch your stack · NVD