CVE-2008-1329: Unspecified vulnerability in the NetBackup service in CA ARCserve Backup for Laptops and Desktops r11.0 throug
58
This month
HIGH 10.0DOWNGRADEDOWNGRADEDOWNGRADE
CVE-2008-1329 is a high-severity flaw (CVSS 10.0) affecting desktop management suite, arcserve backup laptops and desktops, desktop management suite. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Unspecified vulnerability in the NetBackup service in CA ARCserve Backup for Laptops and Desktops r11.0 through r11.5, and Suite 11.1 and 11.2, allows remote attackers to execute arbitrary commands, related to "insufficient verification of file uploads."
Why this priority
Critical severity
EPSS top 7%: very likely to be exploited
No fix is published yet: follow the downgrade or mitigation steps.
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
Verify at the official sourceNVD · CVE Program · Report a problem with this page Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2008-1329?
desktop management suite: downgrade or apply the listed mitigation; arcserve backup laptops and desktops: downgrade or apply the listed mitigation; desktop management suite: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2008-1329 being exploited?
CVE-2008-1329 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2008-1329 affect?
CVE-2008-1329 affects desktop management suite, arcserve backup laptops and desktops, desktop management suite. Severity is high (CVSS 10.0). Unspecified vulnerability in the NetBackup service in CA ARCserve Backup for Laptops and Desktops r11.0 through r11.5, and Suite 11.1 and 11.2, allows remote attackers to execute arbitrary commands, related to "insufficient verification of
How urgent is CVE-2008-1329?
Priority 58/100. Critical severity; EPSS top 7%: very likely to be exploited
Related CVEs
CVE-2008-3175HIGH 10.0DOWNGRADEDOWNGRADE Integer underflow in rxRPC.dll in the LGServer service in the server in CA ARCserve Backup for Laptops and Des
CVE-2008-1786HIGH 9.3DOWNGRADEDOWNGRADE The DSM gui_cm_ctrls ActiveX control (gui_cm_ctrls.ocx), as used in multiple CA products including BrightStor
CVE-2008-1472HIGH 9.3DOWNGRADEDOWNGRADE Stack-based buffer overflow in the ListCtrl ActiveX Control (ListCtrl.ocx), as used in multiple CA products in
CVE-2008-1328HIGH 9.3DOWNGRADEDOWNGRADE Buffer overflow in the LGServer service in CA ARCserve Backup for Laptops and Desktops r11.0 through r11.5, an
CVE-2007-5006HIGH 10.0DOWNGRADEDOWNGRADE Multiple command handlers in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.