VYPR
Unrated severityNVD Advisory· Published May 21, 2008· Updated Apr 23, 2026

CVE-2008-2241

CVE-2008-2241

Description

Directory traversal vulnerability in caloggerd in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allows remote attackers to append arbitrary data to arbitrary files via directory traversal sequences in unspecified input fields, which are used in log messages. NOTE: this can be leveraged for code execution in many installation environments by writing to a startup file or configuration file.

Affected products

7
  • cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1:*:*:*:*:*:*:*
    • cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.5:*:*:*:*:*:*:*
  • cpe:2.3:a:broadcom:server_protection_suite:2:*:*:*:*:*:*:*
  • cpe:2.3:a:ca:brightstor_arcserve_backup:11.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ca:brightstor_arcserve_backup:11.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ca:brightstor_arcserve_backup:r11.0:*:*:*:*:*:*:*
  • cpe:2.3:a:ca:business_protection_suite:2.0:*:microsoft_small_business_server_premium:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ca:business_protection_suite:2.0:*:microsoft_small_business_server_premium:*:*:*:*:*
    • cpe:2.3:a:ca:business_protection_suite:2.0:*:microsoft_small_business_server_standard:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

9

News mentions

0

No linked articles in our index yet.