| Package | Affected versions | Patched versions |
|---|---|---|
| brightstor arcserve backup laptops desktops | = 11.0= 11.1= 11.5= 4.0 | |
| desktop management suite | = 11.0= 11.1= 11.2 | |
| protection suites | = r2 |
Directory traversal vulnerability in rxRPC.dll in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allows remote attackers to upload and overwrite arbitrary files via a ..\ (dot dot backslash) sequence in the destination filename argument to sub-function 8 in the rxrReceiveFileFromServer command.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free