CVE Vulnerability

CVE-2008-4400

Unspecified vulnerability in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to cause a denial of service (crash of multiple services) via crafted authentication credentials, related to "insufficient validation."

5 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 10 / Impact : 2.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

Scope

References
Link Resource
https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=188143 Patch Vendor Advisory
http://www.securityfocus.com/archive/1/497218
http://secunia.com/advisories/32220 Vendor Advisory
http://www.securitytracker.com/id?1021032
http://www.securityfocus.com/bid/31684
http://www.vupen.com/english/advisories/2008/2777
https://exchange.xforce.ibmcloud.com/vulnerabilities/45777
Configurations

Configuration 1

cpe:2.3:a:ca:business_protection_suite:r2:*:microsoft_small_business_server_premium:*:*:*:*:*
cpe:2.3:a:ca:arcserve_backup:r11.1:*:*:*:*:*:*:*
cpe:2.3:a:ca:business_protection_suite:r2:*:microsoft_small_business_server_standard:*:*:*:*:*
cpe:2.3:a:ca:arcserve_backup:r11.5:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:arcserve_backup:r12.0:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:business_protection_suite:r2:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:server_protection_suite:r2:*:*:*:*:*:*:*
Information

Published : 2008-10-14 09:10

Updated : 2021-04-09 06:54

NVD link : CVE-2008-4400

Mitre link : CVE-2008-4400

Products Affected
No products.
CWE
CWE-20