CVE-2007-5328

The Message Engine RPC service in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows attackers to execute arbitrary code by using certain "insecure method calls" to modify the file system and registry, aka "Privileged function exposure."

Link	Resource
http://supportconnectw.ca.com/public/storage/infodocs/basb-secnotice.asp	Patch
http://www.zerodayinitiative.com/advisories/ZDI-07-069.html
http://www.securityfocus.com/bid/26015
http://www.securitytracker.com/id?1018805
http://secunia.com/advisories/27192
http://www.vupen.com/english/advisories/2007/3470
https://exchange.xforce.ibmcloud.com/vulnerabilities/37067
http://www.securityfocus.com/archive/1/484229/100/0/threaded
http://www.securityfocus.com/archive/1/482121/100/0/threaded

Configuration 1

cpe:2.3:a:broadcom:brightstor_arcserve_backup:10.5:*:*:*:*:*:*:* cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.5:*:*:*:*:*:*:* cpe:2.3:a:broadcom:brightstor_arcserve_backup:11:*:*:*:*:*:*:* cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1:*:*:*:*:*:*:* cpe:2.3:a:broadcom:brightstor_arcserve_backup:9.01:*:*:*:*:*:*:* cpe:2.3:a:broadcom:brightstor_enterprise_backup:10.5:*:*:*:*:*:*:*

---

Published : 2007-10-13 12:17

Updated : 2021-04-07 06:20

---

NVD link : CVE-2007-5328

Mitre link : CVE-2007-5328

No products.

CWE-264