NVD

Id
2166  
Name
CVE-2008-2241  
Description
Directory traversal vulnerability in caloggerd in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allows remote attackers to append arbitrary data to arbitrary files via directory traversal sequences in unspecified input fields, which are used in log messages. NOTE: this can be leveraged for code execution in many installation environments by writing to a startup file or configuration file.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-05-21  
Modified Date
2011-03-07  
Seq
2008-2241  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
13789 2166 CVE-2008-2241 20080519 ZDI-08-027: CA BrightStor ARCserve Backup Arbitrary File Writing Vulnerability  View
13790 2166 CVE-2008-2241 20080519 CA ARCserve Backup caloggerd and xdr Functions Vulnerabilities  View
13791 2166 CVE-2008-2241 29283  View
13792 2166 CVE-2008-2241 1020043  View
13793 2166 CVE-2008-2241 ADV-2008-1573  View
13794 2166 CVE-2008-2241 http://www.zerodayinitiative.com/advisories/ZDI-08-027/  View
13795 2166 CVE-2008-2241 ca-arcservebackup-caloggerd-code-execution(42524)  View
13796 2166 CVE-2008-2241 https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=176798  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47184 JVNDB-2008-002494 CA BrightStor ARCServe Backup の caloggerd におけるディレクトリトラバーサルの脆弱性 CA BrightStor ARCServe Backup の caloggerd には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2008-2241 32354 CVE-2008-2241 2166 10 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002494.html 2008-05-19 2010-12-24 View