PT-2008-2920 · Ca · Ca Arcserve Backup For Laptops/Desktops+1

Dyon Balding · Publicado 2008-04-07 · Atualizado 2021-04-08 · CVE-2008-1329

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CA ARCserve Backup for Laptops and Desktops versions r11.0 through r11.5 CA ARCserve Backup Suite versions 11.1 and 11.2

Description The issue allows remote attackers to execute arbitrary commands due to insufficient verification of file uploads.

Recommendations For CA ARCserve Backup for Laptops and Desktops versions r11.0 through r11.5, update to a version outside of the affected range. For CA ARCserve Backup Suite versions 11.1 and 11.2, update to a version outside of the affected range. As a temporary workaround, consider restricting file uploads to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2008-1329

Produtos afetados

Ca Arcserve Backup Suite

Ca Arcserve Backup For Laptops/Desktops

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2008-1329 · Nota de Segurança
• https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=173105 · Nota
• http://securityfocus.com/bid/28616 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41642 · Nota
• http://vupen.com/english/advisories/2008/1104/references · Nota
• http://securityreason.com/securityalert/3800 · Nota
• http://securitytracker.com/id?1019788 · Nota
• http://securityfocus.com/archive/1/490463/100/0/threaded · Nota