Vulnerabilities > Broadcom > Arcserve Backup

DATE CVE VULNERABILITY TITLE RISK
2012-03-22 CVE-2012-1662 Improper Input Validation vulnerability in Broadcom Arcserve Backup R16.0
CA ARCserve Backup r12.0 through SP2, r12.5 before SP2, r15 through SP1, and r16 before SP1 on Windows allows remote attackers to cause a denial of service (service shutdown) via a crafted network request.
network
low complexity
broadcom CWE-20
5.0
2009-10-13 CVE-2009-3588 Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other CA products allows remote attackers to cause a denial of service via a crafted RAR archive file that triggers stack corruption, a different vulnerability than CVE-2009-3587.
network
broadcom ca
4.3
2008-12-11 CVE-2008-5415 The LDBserver service in the server in CA ARCserve Backup 11.1 through 12.0 on Windows allows remote attackers to execute arbitrary code via a handle_t argument to an RPC endpoint in which the argument refers to an incompatible procedure.
network
low complexity
broadcom ca
critical
10.0
2008-10-14 CVE-2008-4400 Improper Input Validation vulnerability in multiple products
Unspecified vulnerability in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to cause a denial of service (crash of multiple services) via crafted authentication credentials, related to "insufficient validation."
network
low complexity
broadcom ca CWE-20
5.0
2008-10-14 CVE-2008-4399 Improper Input Validation vulnerability in multiple products
Unspecified vulnerability in the database engine service in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to cause a denial of service (crash) via a crafted request, related to "insufficient validation."
network
low complexity
broadcom ca CWE-20
5.0
2008-10-14 CVE-2008-4398 Improper Input Validation vulnerability in multiple products
Unspecified vulnerability in the tape engine service in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to cause a denial of service (crash) via a crafted request.
network
low complexity
broadcom ca CWE-20
5.0
2008-10-14 CVE-2008-4397 Improper Input Validation vulnerability in multiple products
Directory traversal vulnerability in the RPC interface (asdbapi.dll) in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to execute arbitrary commands via a ..
network
low complexity
broadcom ca CWE-20
critical
10.0
2001-09-15 CVE-2001-0960 Computer Associates ARCserve for NT 6.61 SP2a and ARCserve 2000 7.0 stores the backup agent user name and password in cleartext in the aremote.dmp file in the ARCSERVE$ hidden share, which allows local and remote attackers to gain privileges.
network
low complexity
broadcom ca
critical
10.0
2001-09-15 CVE-2001-0959 Computer Associates ARCserve for NT 6.61 SP2a and ARCserve 2000 7.0 creates a hidden share named ARCSERVE$, which allows remote attackers to obtain sensitive information and overwrite critical files.
network
low complexity
broadcom ca
6.4
2001-05-18 CVE-2001-1346 Computer Associates ARCserveIT 6.61 and 6.63 (also called ARCservIT) allows local users to overwrite arbitrary files via a symlink attack on the temporary files (1) asagent.tmp or (2) inetd.tmp.
local
high complexity
broadcom ca
1.2