How severe is CVE-2000-0781?

CVE-2000-0781 has a CVSS 2.0 base score of 7.2, rated high severity.

Is CVE-2000-0781 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (31st percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2000-0781?

CVE-2000-0781 affects Ca Arcserve Backup. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2000-0781?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2000-0781 published?

CVE-2000-0781 was published on 2000-10-20 and last updated on 2026-06-16.

CVE-2000-0781

CVE-2000-0781 is a high-severity vulnerability in Ca Arcserve Backup with a CVSS 2.0 base score of 7.2. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: High (CVSS 2.0 base score 7.2)
EPSS exploit prediction: 0% (31st percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Ca Arcserve Backup
Published: 2000-10-20
Last modified: 2026-06-16

Description

uagentsetup in ARCServeIT Client Agent 6.62 does not properly check for the existence or ownership of a temporary file which is moved to the agent.cfg configuration file, which allows local users to execute arbitrary commands by modifying the temporary file before it is moved.

Frequently asked questions

What is CVE-2000-0781?: uagentsetup in ARCServeIT Client Agent 6.62 does not properly check for the existence or ownership of a temporary file which is moved to the agent.cfg configuration file, which allows local users to execute arbitrary commands by modifying the temporary file before it is moved.
How severe is CVE-2000-0781?: CVE-2000-0781 has a CVSS 2.0 base score of 7.2, rated high severity.
Is CVE-2000-0781 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (31st percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2000-0781?: CVE-2000-0781 affects Ca Arcserve Backup. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2000-0781?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-2000-0781 published?: CVE-2000-0781 was published on 2000-10-20 and last updated on 2026-06-16.

References

Affected products (1)

cpe:2.3:a:ca:arcserve_backup:6.63_linux:*:*:*:*:*:*:*

More vulnerabilities in Ca Arcserve Backup

CVE-2009-0042 — Critical (CVSS 10.0): Multiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for…
CVE-2008-5415 — Critical (CVSS 10.0): The LDBserver service in the server in CA ARCserve Backup 11.1 through 12.0 on Windows allows remote attackers to…
CVE-2008-4397 — Critical (CVSS 10.0): Directory traversal vulnerability in the RPC interface (asdbapi.dll) in CA ARCserve Backup (formerly BrightStor…
CVE-2009-3587 — Critical (CVSS 9.3): Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise…
CVE-2009-1761 — Medium (CVSS 5.0): The message engine in CA ARCserve Backup r12.0 and r12.0 SP1 for Windows allows remote attackers to cause a denial of…
CVE-2008-4400 — Medium (CVSS 5.0): Unspecified vulnerability in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through…

All CVEs affecting Ca Arcserve Backup →