CVE-2008-4397

Directory traversal vulnerability in the RPC interface (asdbapi.dll) in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to execute arbitrary commands via a .. (dot dot) in an RPC call with opnum 0x10A.

• CWE-20
• CWE-22

• http://secunia.com/advisories/32220Vendor Advisory
• http://securityreason.com/securityalert/4412
• http://www.securityfocus.com/archive/1/497218
• http://www.securityfocus.com/archive/1/497281/100/0/threaded
• http://www.securityfocus.com/bid/31684
• http://www.securitytracker.com/id?1021032
• http://www.vupen.com/english/advisories/2008/2777
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45774
• https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=188143Patch, Vendor Advisory
• http://secunia.com/advisories/32220Vendor Advisory
• http://securityreason.com/securityalert/4412
• http://www.securityfocus.com/archive/1/497218
• http://www.securityfocus.com/archive/1/497281/100/0/threaded
• http://www.securityfocus.com/bid/31684
• http://www.securitytracker.com/id?1021032
• http://www.vupen.com/english/advisories/2008/2777
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45774
• https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=188143Patch, Vendor Advisory

Published

Oct 14, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-4391Stack-based buffer overflow in the SetSource method in the N…
• CVE-2008-4392dnscache in Daniel J. Bernstein djbdns 1.05 does not prevent…
• CVE-2008-4393Cross-site scripting (XSS) vulnerability in VeriSign Kontiki…
• CVE-2008-4394Multiple untrusted search path vulnerabilities in Portage be…
• CVE-2008-4395Multiple buffer overflows in the ndiswrapper module 1.53 for…
• CVE-2008-4396Stack-based buffer overflow in Safer Networking FileAlyzer 1…
• CVE-2008-4398Unspecified vulnerability in the tape engine service in asdb…
• CVE-2008-4399Unspecified vulnerability in the database engine service in …
• CVE-2008-4400Unspecified vulnerability in asdbapi.dll in CA ARCserve Back…
• CVE-2008-4401ActionScript in Adobe Flash Player 9.0.124.0 and earlier doe…
• CVE-2008-4402Multiple buffer overflows in CGI modules in the server in Tr…
• CVE-2008-4403The CGI modules in the server in Trend Micro OfficeScan 8.0 …