PT-2007-6399 · Ca · Ca Brightstor Arcserve Backup+1

Publicado 2007-10-13 · Atualizado 2021-04-07 · CVE-2007-5328

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: CA BrightStor ARCServe BackUp versions 9.01 through 11.5 CA Enterprise Backup version 10.5

Description: The issue allows attackers to execute arbitrary code by using certain insecure method calls to modify the file system and registry. This is related to the exposure of privileged functions.

Recommendations: For CA BrightStor ARCServe BackUp versions 9.01 through 11.5, update to a version outside of this range to mitigate the risk. For CA Enterprise Backup version 10.5, update to a version later than 10.5 to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2007-5328

Produtos afetados

Ca Brightstor Arcserve Backup

Ca Enterprise Backup

Referências · 10

• http://vupen.com/english/advisories/2007/3470 · Nota
• http://securityfocus.com/archive/1/484229/100/0/threaded · Nota
• http://securityfocus.com/archive/1/482121/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37067 · Nota
• http://zerodayinitiative.com/advisories/ZDI-07-069.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-5328 · Nota de Segurança
• http://supportconnectw.ca.com/public/storage/infodocs/basb-secnotice.asp · Correção
• http://securityfocus.com/bid/26015 · Nota
• http://securitytracker.com/id?1018805 · Nota
• http://secunia.com/advisories/27192 · Nota