CVE-2008-2241

high · 10

Directory traversal vulnerability in caloggerd in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allows remote attackers to append arbitrary data to arbitrary files via directory traversal sequences in unspecified input fields, which are used in log messages. NOTE: this can be leveraged for code execution in many installation environments by writing to a startup file or configuration file.

CVSS

11.9%

EPSS (exploit prob.)

96th

EPSS percentile

2008-05-21

Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

CWE-22

Affected products

Vendor	Product	Affected versions
broadcom	brightstor_arcserve_backup	11.1
broadcom	brightstor_arcserve_backup	11.5
broadcom	server_protection_suite	2
ca	brightstor_arcserve_backup	11.0
ca	brightstor_arcserve_backup	r11.0
ca	business_protection_suite	2.0
ca	business_protection_suite	2.0

Check a specific version with /api/v1/cve/match.

References

http://secunia.com/advisories/30300
http://www.securityfocus.com/archive/1/492266/100/0/threaded
http://www.securityfocus.com/archive/1/492274/100/0/threaded
http://www.securityfocus.com/bid/29283
http://www.securitytracker.com/id?1020043
http://www.vupen.com/english/advisories/2008/1573/references
http://www.zerodayinitiative.com/advisories/ZDI-08-027/
https://exchange.xforce.ibmcloud.com/vulnerabilities/42524
https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=176798
http://secunia.com/advisories/30300
http://www.securityfocus.com/archive/1/492266/100/0/threaded
http://www.securityfocus.com/archive/1/492274/100/0/threaded
http://www.securityfocus.com/bid/29283
http://www.securitytracker.com/id?1020043
http://www.vupen.com/english/advisories/2008/1573/references
http://www.zerodayinitiative.com/advisories/ZDI-08-027/
https://exchange.xforce.ibmcloud.com/vulnerabilities/42524
https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=176798

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2008-2241