CVE-2008-5415: Broadcom Arcserve Backup

High severity, CVSS 10.0. EPSS: 8.3% chance of exploitation in the next 30 days.

The LDBserver service in the server in CA ARCserve Backup 11.1 through 12.0 on Windows allows remote attackers to execute arbitrary code via a handle_t argument to an RPC endpoint in which the argument refers to an incompatible procedure.

Affected products

• Broadcom Arcserve Backup: version r12.0 only
• Ca Arcserve Backup: version r11.1 only; version r11.5 only

Published 2008-12-11. Last modified 2026-06-16.