Directory Traversal and Buffer Overflow in CA ARCserve Backup asdbapi.dll

This repository contains a single Metasploit exploit module targeting a buffer overflow vulnerability (CVE-2008-4397) in Computer Associates BrightStor ARCserve r11.5 (build 3884) on Windows. The exploit abuses a flaw in the REPORTREMOTEEXECUTECML DCERPC interface (opcode 0x342) accessible over TCP port 6504. The attacker must provide the NetBIOS hostname of the target. The module fingerprints the target OS via SMB (port 445) to adjust offsets, then crafts a malicious DCERPC request to trigger the overflow and execute arbitrary code. The payload is customizable (up to 550 bytes) and can be any standard Metasploit shellcode. The exploit is operational and provides remote code execution with system privileges if successful. The code is written in Ruby and is structured as a typical Metasploit module, with clear separation of initialization, fingerprinting, and exploitation logic. No hardcoded IPs or domains are present, but the exploit requires network access to the target's relevant ports.