CVE-2008-4397: broadcom arcserve_backup Improper Input Validation
Vulnerability summary
CVE-2008-4397 is a high (CVSS 10.0) Improper Input Validation vulnerability in broadcom arcserve_backup. EPSS estimates a 80.54% chance of exploitation in the next 30 days, higher than 99.6% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 14-10-2008PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Directory traversal vulnerability in the RPC interface (asdbapi.dll) in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to execute arbitrary commands via a .. (dot dot) in an RPC call with opnum 0x10A.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
80.54%
Chance of exploitation in the next 30 days
Percentile
100%
Versus all other CVEs
30-day change
0.00 pp
From 80.54% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundComputer Associates ARCserve - REPORTREMOTEEXECUTECML Buffer Overflow (Metasploit)
Maturity: weaponized
Computer Associates ARCserve REPORTREMOTEEXECUTECML Buffer Overflow
exploit/windows/brightstor/ca_arcserve_342
Maturity: poc
Weaknesses
CWE · root cause- CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
- CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Affected systems
Broadcom3 products
Ca2 products
- arcserve_backupr11.1 | r11.5
- business_protection_suiter2
2 vendors · 5 products
References
9 links- support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=188143X Refsource CONFIRMPatchVendor Advisory