TUCoPS :: Security App Flaws :: bx3214.htm

CA BrightStor ARCserve Backup Arbitrary File Writing Vulnerability
ZDI-08-027: CA BrightStor ARCserve Backup Arbitrary File Writing Vulnerability
ZDI-08-027: CA BrightStor ARCserve Backup Arbitrary File Writing Vulnerability


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TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2024 AOH