PT-2007-6110 · Ca · Ca Brightstor Arcserve Backup For Laptops/Desktops

Publicado 2007-10-01 · Atualizado 2021-04-08 · CVE-2007-5004

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CA BrightStor ARCserve Backup for Laptops and Desktops versions r11.0 through r11.5

Description The issue is related to an integer overflow that allows remote attackers to execute arbitrary code. This can be achieved by providing a long username and a specific "useless" password.

Recommendations For versions r11.0 through r11.5, update to a version that contains a fix for this issue to prevent remote code execution.

Correção

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2007-5004

Produtos afetados

Ca Brightstor Arcserve Backup For Laptops/Desktops

Referências · 9

• http://ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35675 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2007-5004 · Nota de Segurança
• http://ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=156006 · Correção
• http://secunia.com/advisories/25606 · Aviso do Fabricante
• http://research.eeye.com/html/advisories/published/AD20070920.html · Nota
• http://securityfocus.com/archive/1/480252/100/100/threaded · Nota
• http://supportconnectw.ca.com/public/sams/lifeguard/infodocs/caarcservebld-securitynotice.asp · Correção
• http://securitytracker.com/id?1018728 · Nota
• http://securityfocus.com/bid/24348 · Nota