Ca Arcserve Backup 2000 vulnerabilities

2 CVEs affecting Ca Arcserve Backup 2000, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2001-0960, published 2001-09-15.

More from Ca.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2001-0960, published 2001-09-15. High severity, CVSS 10.0. EPSS: 3.4% chance of exploitation in the next 30 days. Computer Associates ARCserve for NT 6.61 SP2a and ARCserve 2000 7.0 stores the backup agent user name and password in cleartext in the aremote.dmp file in the ARCSERVE$ hidden share, which allows…
• CVE-2001-0959, published 2001-09-15. Medium severity, CVSS 6.4. EPSS: 3% chance of exploitation in the next 30 days. Computer Associates ARCserve for NT 6.61 SP2a and ARCserve 2000 7.0 creates a hidden share named ARCSERVE$, which allows remote attackers to obtain sensitive information and overwrite critical files.