CVE-2008-2241 | BDVDB-2026-30752 Detail
Description#
Directory traversal vulnerability in caloggerd in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allows remote attackers to append arbitrary data to arbitrary files via directory traversal sequences in unspecified input fields, which are used in log messages. NOTE: this can be leveraged for code execution in many installation environments by writing to a startup file or configuration file.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.securityfocus.com/bid/29283
- http://secunia.com/advisories/30300
- http://www.zerodayinitiative.com/advisories/ZDI-08-027/
- https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=176798
- http://www.vupen.com/english/advisories/2008/1573/references
- http://www.securityfocus.com/archive/1/492266/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42524
- http://www.securityfocus.com/archive/1/492274/100/0/threaded
- http://www.securitytracker.com/id?1020043
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.