CVE-2008-5415

CRITICAL 10.0CVE-2008-5415 · Published 11/12/2008 · updated 16/06/2026

In short

CVE-2008-5415 is a CRITICAL (CVSS 10.0) vulnerability affecting arcserve backup (broadcom), arcserve backup (ca).
Chance of exploitation in the next 30 days (EPSS): 8.3%, higher than 94.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
arcserve backup broadcom	`= r12.0`	No fix yet
arcserve backup ca	`= r11.1= r11.5`	No fix yet

Description

The LDBserver service in the server in CA ARCserve Backup 11.1 through 12.0 on Windows allows remote attackers to execute arbitrary code via a handle_t argument to an RPC endpoint in which the argument refers to an incompatible procedure.

References

community.ca.com/blogs/casecurityresponseblog/archive/2008/12/10.aspx
osvdb.org/50683
secunia.com/advisories/27299 · Vendor Advisory
secunia.com/secunia_research/2007-82 · Vendor Advisory
securityreason.com/securityalert/4708
securityfocus.com/archive/1/499104/100/0/threaded
securityfocus.com/archive/1/499128/100/0/threaded
securityfocus.com/bid/32764
vupen.com/english/advisories/2008/3404 · Vendor Advisory
support.ca.com/irj/portal/anonymous/phpsupcontent · Patch

More vulnerabilities in arcserve backup

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

arcserve backup

broadcom

= r12.0

No fix yet

arcserve backup

= r11.1= r11.5

No fix yet

More vulnerabilities in arcserve backup

See all →