CVE-2008-2241

CWE-22 — Path Traversal3 documents3 sources
Severity
10.0CRITICAL
EPSS
6.9%
top 8.57%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Broadcom Brightstor Arcserve BackupBroadcom Server Protection SuiteCA Brightstor Arcserve Backup+1 more
Timeline
PublishedMay 21
Latest updateMay 1

Description

Directory traversal vulnerability in caloggerd in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allows remote attackers to append arbitrary data to arbitrary files via directory traversal sequences in unspecified input fields, which are used in log messages. NOTE: this can be leveraged for code execution in many installation environments by writing to a startup file or configuration file.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages4 packages

Patches

Patch: www.securityfocus.com ↗Patch: support.ca.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-rf6w-c4pq-fpfw: Directory traversal vulnerability in caloggerd in CA BrightStor ARCServe Backup 11↗2022-05-01
▶
CVEList
CVE-2008-2241: Directory traversal vulnerability in caloggerd in CA BrightStor ARCServe Backup 11↗2008-05-21
▶