Gravità: : Critico
  Identificatori CVE: CVE-2008-4397
  Data notifica: 21 luglio 2015

  Descrizione

Directory traversal vulnerability in the RPC interface (asdbapi.dll) in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to execute arbitrary commands via a .. (dot dot) in an RPC call with opnum 0x10A.

  Informazioni esposizione:

Apply associated Trend Micro DPI Rules.

  Soluzioni

  Trend Micro Deep Security DPI Rule Number: 1003158
  Trend Micro Deep Security DPI Rule Name: 1003158 - CA ARCserve Backup Directory Traversal Vulnerability

  Software e versione interessati:

  • ca arcserve_backup r11.1
  • ca arcserve_backup r11.5
  • ca arcserve_backup r12.0
  • ca business_protection_suite r2
  • ca server_protection_suite r2