PRIOn knowledge basePRION:CVE-2008-4397

HistoryOct 14, 2008 - 9:10 p.m.

Directory traversal

2008-10-1421:10:00

PRIOn knowledge base

www.prio-n.com

7.7 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.867 High

EPSS

Percentile

98.5%

JSON

Directory traversal vulnerability in the RPC interface (asdbapi.dll) in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to execute arbitrary commands via a … (dot dot) in an RPC call with opnum 0x10A.

CPENameOperatorVersion
arcserve_backupeq12.0.114
business_protection_suiteeq2.0.114
server_protection_suiteeq2.0.114
arcserve_backupeq11.1.114
arcserve_backupeq11.5.114
business_protection_suiteeqr2 microsoftsmallbusinessserverpremium
business_protection_suiteeqr2 microsoftsmallbusinessserverstandard

Name	Operator	Version
arcserve_backup	eq	12.0.114
business_protection_suite	eq	2.0.114
server_protection_suite	eq	2.0.114
arcserve_backup	eq	11.1.114
arcserve_backup	eq	11.5.114
business_protection_suite	eq	r2 microsoftsmallbusinessserverpremium
business_protection_suite	eq	r2 microsoftsmallbusinessserverstandard

References

secunia.com/advisories/32220

securityreason.com/securityalert/4412

www.securityfocus.com/archive/1/497218

www.securityfocus.com/archive/1/497281/100/0/threaded

www.securityfocus.com/bid/31684

www.securitytracker.com/id?1021032

www.vupen.com/english/advisories/2008/2777

exchange.xforce.ibmcloud.com/vulnerabilities/45774

support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=188143

7.7 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.867 High

EPSS

Percentile

98.5%

JSON

Related for PRION:CVE-2008-4397