SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2008-2242

Multiple buffer overflows in xdr functions in the server in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allow remote attackers to execute arbitrary code, as demonstrated by a stack-based buffer overflow via a long parameter to the xdr_rwsstring…

HIGH 7.5EPSS 14.7%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 14.7%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.

Description

Multiple buffer overflows in xdr functions in the server in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allow remote attackers to execute arbitrary code, as demonstrated by a stack-based buffer overflow via a long parameter to the xdr_rwsstring function.

CVSS 2.0
7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
14.72% probability · 96th percentile
CISA KEV
Not listed
Weakness
CWE-119
Affected
broadcom/brightstor arcserve backup · ca/brightstor arcserve backup
Source
cve@mitre.org

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.