Arcserve Backup

Vendor:

First CVE: Oct 20, 2000 · Active for 25 years

11

Total CVEs

More Total CVEs than 89% of tracked products

2.8

Avg CVEs / Year

Higher CVE frequency than 75% of tracked products

6.5

Avg CVSS

Higher Avg CVSS than 32% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Arcserve Backup over time

Volume of CVEsAvg CVSS Base Score

First CVE

Oct 20, 2000

25 years ago

Most Recent CVE

Oct 13, 2009

6,128 days ago

CVE Severity & Scoring

Arcserve Backup11 CVEs

9%

45%

All CVEs352,231 CVEs

45%

40%

11%

LowMediumHigh

Attack Vector

Local0 (0.0%)

Network0 (0.0%)

Unknown11 (100.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low0 (0.0%)

High0 (0.0%)

Unknown11 (100.0%)

User Interaction

None0 (0.0%)

Unknown11 (100.0%)

Required0 (0.0%)

Privileges Required

Low0 (0.0%)

High0 (0.0%)

None0 (0.0%)

Unknown11 (100.0%)

Top CVEs

Signals from CVEs in this product scope (11 CVEs).

11 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2008-4397HIGH Directory traversal vulnerability in the RPC interface (asdbapi.dll) in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to exec	Oct 14, 2008	10.0	84	NO	YES
CVE-2009-3587HIGH Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) th	Oct 13, 2009	9.3	31	NO	NO
CVE-2009-0042HIGH Multiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for CA Anti-Virus for the Enterprise 7.1, r8, and r8.1; Anti-Vir	Jan 28, 2009	10.0	29	NO	NO
CVE-2008-5415HIGH The LDBserver service in the server in CA ARCserve Backup 11.1 through 12.0 on Windows allows remote attackers to execute arbitrary code via a handle_t argument to an RPC endpoint	Dec 11, 2008	10.0	28	NO	NO
CVE-2008-4399MEDIUM Unspecified vulnerability in the database engine service in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to c	Oct 14, 2008	5.0	19	NO	NO
CVE-2000-0781HIGH uagentsetup in ARCServeIT Client Agent 6.62 does not properly check for the existence or ownership of a temporary file which is moved to the agent.cfg configuration file, which all	Oct 20, 2000	7.2	18	NO	NO
CVE-2008-4400MEDIUM Unspecified vulnerability in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to cause a denial of service (crash	Oct 14, 2008	5.0	17	NO	NO
CVE-2008-4398MEDIUM Unspecified vulnerability in the tape engine service in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to cause	Oct 14, 2008	5.0	17	NO	NO
CVE-2009-3588MEDIUM Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) th	Oct 13, 2009	4.3	16	NO	NO
CVE-2009-1761MEDIUM The message engine in CA ARCserve Backup r12.0 and r12.0 SP1 for Windows allows remote attackers to cause a denial of service (crash) via (1) an invalid 0x13 message, which is not	Jun 16, 2009	5.0	15	NO	NO

View all 11 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (11 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

1 CVE

9.1% of CVEs· 97th percentile

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

2 CVEs

18.2% of CVEs· 89th percentile

Social Chatter

Signals from CVEs in this product scope (11 CVEs).

Media Mentions

Signals from CVEs in this product scope (11 CVEs).

Top CNAs Publishing CVEs For Arcserve Backup

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	Exploits
r12.0_nil_	1	10.0	4.3%	0
r12.0	1	5.0	2.2%	0
r11.5_nil_	1	10.0	4.3%	0
r11.5	7	6.9	14.3%	1
r11.1	8	7.6	14.1%	1
6.63_linux	1	7.2	0.4%	0
6.63	1	1.2	0.6%	1