Strix
26.1K

CVE-2008-2241

UnknownEPSS 11.94%

Last modified

CVE-2008-2241 is a vulnerability of currently unknown severity. Directory traversal vulnerability in caloggerd in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allows remote attackers to append arbitrary data to arbitrary files via directory traversal sequences in unspecified input fields, which are used in log messages. NOTE: this can be leveraged for code execution in many installation environments by writing to a startup file or configuration file.. EPSS estimates a 11.94% chance of exploitation in the next 30 days.

Description

Directory traversal vulnerability in caloggerd in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allows remote attackers to append arbitrary data to arbitrary files via directory traversal sequences in unspecified input fields, which are used in log messages. NOTE: this can be leveraged for code execution in many installation environments by writing to a startup file or configuration file.

Metrics

EPSS Probability
11.94%

95.6th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
BroadcomBrightstor Arcserve Backup11.1
BroadcomBrightstor Arcserve Backup11.5
BroadcomServer Protection Suite2
CaBrightstor Arcserve Backup11.0
CaBrightstor Arcserve Backupr11.0
CaBusiness Protection Suite2.0

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2008-2241?
Directory traversal vulnerability in caloggerd in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allows remote attackers to append arbitrary data to arbitrary files via directory traversal sequences in unspecified input fields, which are used in log messages. NOTE: this can be leveraged for code execution in many installation environments by writing to a startup file or configuration file.
How severe is CVE-2008-2241?
Severity scoring for CVE-2008-2241 is pending analysis. The EPSS model estimates a 11.94% probability of exploitation in the next 30 days.
How do I fix CVE-2008-2241?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2008-2241?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST