CVE-2008-4400

Unspecified vulnerability in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to cause a denial of service (crash of multiple services) via crafted authentication credentials, related to "insufficient validation."

• CWE-20

• http://secunia.com/advisories/32220Vendor Advisory
• http://www.securityfocus.com/archive/1/497218
• http://www.securityfocus.com/bid/31684
• http://www.securitytracker.com/id?1021032
• http://www.vupen.com/english/advisories/2008/2777
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45777
• https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=188143Patch, Vendor Advisory
• http://secunia.com/advisories/32220Vendor Advisory
• http://www.securityfocus.com/archive/1/497218
• http://www.securityfocus.com/bid/31684
• http://www.securitytracker.com/id?1021032
• http://www.vupen.com/english/advisories/2008/2777
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45777
• https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=188143Patch, Vendor Advisory

Published

Oct 14, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-4394Multiple untrusted search path vulnerabilities in Portage be…
• CVE-2008-4395Multiple buffer overflows in the ndiswrapper module 1.53 for…
• CVE-2008-4396Stack-based buffer overflow in Safer Networking FileAlyzer 1…
• CVE-2008-4397Directory traversal vulnerability in the RPC interface (asdb…
• CVE-2008-4398Unspecified vulnerability in the tape engine service in asdb…
• CVE-2008-4399Unspecified vulnerability in the database engine service in …
• CVE-2008-4401ActionScript in Adobe Flash Player 9.0.124.0 and earlier doe…
• CVE-2008-4402Multiple buffer overflows in CGI modules in the server in Tr…
• CVE-2008-4403The CGI modules in the server in Trend Micro OfficeScan 8.0 …
• CVE-2008-4404The IPv6 Neighbor Discovery Protocol (NDP) implementation on…
• CVE-2008-4405xend in Xen 3.0.3 does not properly limit the contents of th…
• CVE-2008-4406A certain Debian patch to the run scripts for sabre (aka xsa…