CVE-2008-2242

2008-05-2113:24:00

CWE-119

[email protected]

web.nvd.nist.gov

buffer overflows

ca brightstor arcserve backup

remote code execution

cve-2008-2242

nvd

7.5 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.915 High

EPSS

Percentile

98.9%

JSON

Multiple buffer overflows in xdr functions in the server in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allow remote attackers to execute arbitrary code, as demonstrated by a stack-based buffer overflow via a long parameter to the xdr_rwsstring function.

CPENameOperatorVersion
ca:brightstor_arcserve_backupca brightstor arcserve backupeq11.0
broadcom:brightstor_arcserve_backupbroadcom brightstor arcserve backupeq11.5
broadcom:brightstor_arcserve_backupbroadcom brightstor arcserve backupeq11.1

CPE	Name	Operator	Version
ca:brightstor_arcserve_backup	ca brightstor arcserve backup	eq	11.0
broadcom:brightstor_arcserve_backup	broadcom brightstor arcserve backup	eq	11.5
broadcom:brightstor_arcserve_backup	broadcom brightstor arcserve backup	eq	11.1