PT-2008-2920 · Ca · Ca Arcserve Backup For Laptops/Desktops+1

Dyon Balding · Published 2008-04-07 · Updated 2021-04-08 · CVE-2008-1329

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CA ARCserve Backup for Laptops and Desktops versions r11.0 through r11.5 CA ARCserve Backup Suite versions 11.1 and 11.2

Description The issue allows remote attackers to execute arbitrary commands due to insufficient verification of file uploads.

Recommendations For CA ARCserve Backup for Laptops and Desktops versions r11.0 through r11.5, update to a version outside of the affected range. For CA ARCserve Backup Suite versions 11.1 and 11.2, update to a version outside of the affected range. As a temporary workaround, consider restricting file uploads to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2008-1329

Affected Products

Ca Arcserve Backup Suite

Ca Arcserve Backup For Laptops/Desktops

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2008-1329 · Security Note
• https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=173105 · Note
• http://securityfocus.com/bid/28616 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41642 · Note
• http://vupen.com/english/advisories/2008/1104/references · Note
• http://securityreason.com/securityalert/3800 · Note
• http://securitytracker.com/id?1019788 · Note
• http://securityfocus.com/archive/1/490463/100/0/threaded · Note