NVD

Id
4223  
Name
CVE-2008-4397  
Description
Directory traversal vulnerability in the RPC interface (asdbapi.dll) in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to execute arbitrary commands via a .. (dot dot) in an RPC call with opnum 0x10A.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-10-14  
Modified Date
2011-03-07  
Seq
2008-4397  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
26833 4223 CVE-2008-4397 4412  View
26834 4223 CVE-2008-4397 20081009 CA ARCserve Backup Multiple Vulnerabilities  View
26835 4223 CVE-2008-4397 20081011 CA BrightStor ARCServe BackUp Message Engine Remote Command Injection Vulnerability  View
26836 4223 CVE-2008-4397 31684  View
26837 4223 CVE-2008-4397 1021032  View
26838 4223 CVE-2008-4397 ADV-2008-2777  View
26839 4223 CVE-2008-4397 ca-arcservebackup-message-command-execution(45774)  View
26840 4223 CVE-2008-4397 https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=188143  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47191 JVNDB-2008-002501 CA ARCserve Backup の RPC インターフェイスにおけるディレクトリトラバーサルの脆弱性 CA ARCserve Backup の RPC インターフェイス (asdbapi.dll) には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2008-4397 34510 CVE-2008-4397 4223 10 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002501.html 2008-10-09 2010-12-24 View