PT-2007-6110 · Ca · Ca Brightstor Arcserve Backup For Laptops/Desktops

Published 2007-10-01 · Updated 2021-04-08 · CVE-2007-5004

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CA BrightStor ARCserve Backup for Laptops and Desktops versions r11.0 through r11.5

Description The issue is related to an integer overflow that allows remote attackers to execute arbitrary code. This can be achieved by providing a long username and a specific "useless" password.

Recommendations For versions r11.0 through r11.5, update to a version that contains a fix for this issue to prevent remote code execution.

Fix

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2007-5004

Affected Products

Ca Brightstor Arcserve Backup For Laptops/Desktops

References · 9

• http://ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35675 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2007-5004 · Security Note
• http://ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=156006 · Patch
• http://secunia.com/advisories/25606 · Vendor Advisory
• http://supportconnectw.ca.com/public/sams/lifeguard/infodocs/caarcservebld-securitynotice.asp · Patch
• http://research.eeye.com/html/advisories/published/AD20070920.html · Note
• http://securityfocus.com/archive/1/480252/100/100/threaded · Note
• http://securitytracker.com/id?1018728 · Note
• http://securityfocus.com/bid/24348 · Note