Arcserve Backup Security Vulnerabilities and Issues — Arcserve Backup CVE List

Lucene search

CaArcserve Backup

11 matches found

CVE•added 2009/01/28 1:30 a.m.•100 views

CVE-2009-0042

Multiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for CA Anti-Virus for the Enterprise 7.1, r8, and r8.1; Anti-Virus 2007 v8 and 2008; Internet Security Suite 2007 v3 and 2008; and other CA products allow remote attackers to bypass v...

10CVSS6.7AI score0.01235EPSS

CVE•added 2009/10/13 10:30 a.m.•85 views

CVE-2009-3587

Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other CA products allows...

9.3CVSS7.4AI score0.08216EPSS

CVE•added 2009/10/13 10:30 a.m.•83 views

CVE-2009-3588

4.3CVSS6.2AI score0.08216EPSS

CVE•added 2008/10/14 9:10 p.m.•50 views

CVE-2008-4398

Unspecified vulnerability in the tape engine service in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to cause a denial of service (crash) via a crafted request.

5CVSS6.3AI score0.02376EPSS

CVE•added 2008/10/14 9:10 p.m.•47 views

CVE-2008-4397

Directory traversal vulnerability in the RPC interface (asdbapi.dll) in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to execute arbitrary commands via a .. (dot dot) in an RPC call with opnum 0x10A.

10CVSS7.3AI score0.85816EPSS

CVE•added 2004/09/01 4:0 a.m.•44 views

CVE-2000-0781

uagentsetup in ARCServeIT Client Agent 6.62 does not properly check for the existence or ownership of a temporary file which is moved to the agent.cfg configuration file, which allows local users to execute arbitrary commands by modifying the temporary file before it is moved.

7.2CVSS7.6AI score0.00063EPSS

CVE•added 2009/06/16 11:30 p.m.•43 views

CVE-2009-1761

The message engine in CA ARCserve Backup r12.0 and r12.0 SP1 for Windows allows remote attackers to cause a denial of service (crash) via (1) an invalid 0x13 message, which is not properly handled in the ASCORE module, or (2) a 0x3B message with invalid stub data that triggers an RPC marshalling er...

5CVSS6.9AI score0.02184EPSS

CVE•added 2008/10/14 9:10 p.m.•41 views

CVE-2008-4399

Unspecified vulnerability in the database engine service in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to cause a denial of service (crash) via a crafted request, related to "insufficient validation."

5CVSS6.3AI score0.02376EPSS

CVE•added 2008/12/11 3:30 p.m.•38 views

CVE-2008-5415

The LDBserver service in the server in CA ARCserve Backup 11.1 through 12.0 on Windows allows remote attackers to execute arbitrary code via a handle_t argument to an RPC endpoint in which the argument refers to an incompatible procedure.

10CVSS7.5AI score0.15626EPSS

CVE•added 2008/10/14 9:10 p.m.•37 views

CVE-2008-4400

Unspecified vulnerability in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to cause a denial of service (crash of multiple services) via crafted authentication credentials, related to "insufficient validation."

5CVSS6.7AI score0.02553EPSS

CVE•added 2002/05/03 4:0 a.m.•32 views

CVE-2001-1346

Computer Associates ARCserveIT 6.61 and 6.63 (also called ARCservIT) allows local users to overwrite arbitrary files via a symlink attack on the temporary files (1) asagent.tmp or (2) inetd.tmp.

1.2CVSS6.8AI score0.00226EPSS