CVE-2008-2241

Description

Directory traversal vulnerability in caloggerd in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allows remote attackers to append arbitrary data to arbitrary files via directory traversal sequences in unspecified input fields, which are used in log messages. NOTE: this can be leveraged for code execution in many installation environments by writing to a startup file or configuration file.

References

https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=176798

https://exchange.xforce.ibmcloud.com/vulnerabilities/42524

http://www.zerodayinitiative.com/advisories/ZDI-08-027/

http://www.vupen.com/english/advisories/2008/1573/references

http://www.securitytracker.com/id?1020043

http://www.securityfocus.com/bid/29283

http://www.securityfocus.com/archive/1/492274/100/0/threaded

http://www.securityfocus.com/archive/1/492266/100/0/threaded

http://secunia.com/advisories/30300

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3