CVE:CVE-2008-2241
CNNVD:CNNVD-200805-274
BrightStor ARCserve Backup可为各种平台的服务器提供备份和恢复保护功能。
ARCserve Backup的caloggerd日志守护程序在处理日志消息时对提供的路径缺少检查，如果攻击者向文件附加了恶意数据的话，就可能导致在生成日志时导致目录遍历攻击。
solution:Upgrade broadcom brightstor_arcserve_backup to a higher version than 11.1,11.5,and avoid the version 11.1,11.5; Upgrade broadcom server_protection_suite to a higher version than 2,and avoid the version 2; Upgrade ca brightstor_arcserve_backup to a higher version than 11.0,r11.0,and avoid the version 11.0,r11.0; Upgrade ca business_protection_suite to a higher version than 2.0,and avoid the version 2.0