CVE-2008-2241 in the critical feed json
Directory traversal vulnerability in caloggerd in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allows remote attackers to append arbi…
published 2008-05-21 18 y ago modified 2026-06-16 4 mo ago also EUVD-2008-2238
- cvss
- 10.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 11.9%
- EPSS 11.9% chance of exploitation in 30 days, percentile 96%
- public exploits
- 0
- none known
Summary
Directory traversal vulnerability in caloggerd in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allows remote attackers to append arbitrary data to arbitrary files via directory traversal sequences in unspecified input fields, which are used in log messages. NOTE: this can be leveraged for code execution in many installation environments by writing to a startup file or configuration file.
Patch / fix
Exploit prediction
11.94% chance of exploitation in the next 30 days, higher than 96% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Classification
- Weakness
-
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory
References
-
securityfocus.com
/bid/29283
vdb-entry, patch
-
support.ca.com
/irj/portal/anonymous/phpsupcontent?contentID=176798
patch
-
secunia.com
/advisories/30300
third-party-advisory
- zerodayinitiative.com /advisories/ZDI-08-027/
-
vupen.com
/english/advisories/2008/1573/references
vdb-entry
-
securityfocus.com
/archive/1/492266/100/0/threaded
mailing-list
-
exchange.xforce.ibmcloud.com
/vulnerabilities/42524
vdb-entry
-
securityfocus.com
/archive/1/492274/100/0/threaded
mailing-list
-
securitytracker.com
/id?1020043
vdb-entry
Sources
- CVE List CVE-2008-2241
- NVD CVE-2008-2241
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.