PT-2007-6112 · Ca · Ca Brightstor Arcserve Backup For Laptops/Desktops

Publicado 2007-10-01 · Atualizado 2021-04-08 · CVE-2007-5006

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CA BrightStor ARCserve Backup for Laptops and Desktops versions r11.0 through r11.5

Description The issue concerns multiple command handlers that do not verify peer authentication, allowing remote attackers to perform unauthorized actions such as adding and deleting users, and starting client restores.

Recommendations For versions r11.0 through r11.5, update to a version that includes the necessary authentication verification for command handlers to prevent unauthorized access.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2007-5006

Produtos afetados

Ca Brightstor Arcserve Backup For Laptops/Desktops

Referências · 9

• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=598 · Nota
• http://ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=156006 · Correção
• http://ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35677 · Correção
• http://secunia.com/advisories/25606 · Aviso do Fabricante
• http://securityfocus.com/archive/1/480252/100/100/threaded · Nota
• http://supportconnectw.ca.com/public/sams/lifeguard/infodocs/caarcservebld-securitynotice.asp · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2007-5006 · Nota de Segurança
• http://securitytracker.com/id?1018728 · Nota
• http://securityfocus.com/bid/24348 · Nota