← Database

CVE-2008-4397

CRITICAL CVSS: 10.0 Published: 2008-10-14 Modified: 2026-06-16

Description

Directory traversal vulnerability in the RPC interface (asdbapi.dll) in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to execute arbitrary commands via a .. (dot dot) in an RPC call with opnum 0x10A.

Affected Platforms

Broadcom Arcserve BackupBroadcom Business Protection SuiteCa Arcserve BackupBroadcom Server Protection SuiteCa Business Protection Suite

Weakness Type

CWE-20, CWE-22

References