CVE-2008-4397

🗓️ 14 Oct 2008 20:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 52 Views🌐 WEB

Directory traversal vuln in CA ARCserve Backup allows remote attackers to execute arbitrary commands

Reporter	Title	Published	Views	Family All 14
Tenable Nessus	CA BrightStor ARCserve Backup RPC Interface (asdbapi.dll) Traversal Arbitrary Command Execution	14 Oct 200800:00	–	nessus
canvas	Immunity Canvas: BRIGHTSTOR_CMDEXEC	14 Oct 200821:10	–	canvas
Circl	CVE-2008-4397	30 Apr 201000:00	–	circl
Cvelist	CVE-2008-4397	14 Oct 200820:00	–	cvelist
Exploit DB	Computer Associates ARCserve - REPORTREMOTEEXECUTECML Buffer Overflow (Metasploit)	30 Apr 201000:00	–	exploitdb
exploitpack	CA-ArcServe	12 Jun 200800:00	–	exploitpack
Metasploit	Computer Associates ARCserve REPORTREMOTEEXECUTECML Buffer Overflow	4 Dec 200902:55	–	metasploit
NVD	CVE-2008-4397	14 Oct 200821:10	–	nvd
Packet Storm	cabrightstor-exec.txt	11 Oct 200800:00	–	packetstorm
Packet Storm	Computer Associates ARCserve REPORTREMOTEEXECUTECML Buffer Overflow	31 Dec 200900:00	–	packetstorm

NVD

Node

ca business_protection_suiteMatchr2microsoft_small_business_server_premium

ca business_protection_suiteMatchr2microsoft_small_business_server_standard

Source	Link
securitytracker	www.securitytracker.com/id
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/45774
securityfocus	www.securityfocus.com/bid/31684
vupen	www.vupen.com/english/advisories/2008/2777
secunia	www.secunia.com/advisories/32220
securityfocus	www.securityfocus.com/archive/1/497218
securityreason	www.securityreason.com/securityalert/4412
securityfocus	www.securityfocus.com/archive/1/497281/100/0/threaded
support	www.support.ca.com/irj/portal/anonymous/phpsupcontent

Parameter	Position	Path	Description	CWE
opnum 0x10A	request body	asdbapi.dll	Directory traversal via RPC to asdbapi.dll allowing remote command execution through dot-dot path in an RPC call	CWE-20, CWE-22

23 Apr 2026 00:35Current

7.3High risk

Vulners AI Score7.3

CVSS 210

EPSS0.85816