PT-2007-6112 · Ca · Ca Brightstor Arcserve Backup For Laptops/Desktops

Published 2007-10-01 · Updated 2021-04-08 · CVE-2007-5006

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CA BrightStor ARCserve Backup for Laptops and Desktops versions r11.0 through r11.5

Description The issue concerns multiple command handlers that do not verify peer authentication, allowing remote attackers to perform unauthorized actions such as adding and deleting users, and starting client restores.

Recommendations For versions r11.0 through r11.5, update to a version that includes the necessary authentication verification for command handlers to prevent unauthorized access.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2007-5006

Affected Products

Ca Brightstor Arcserve Backup For Laptops/Desktops

References · 9

• http://ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=156006 · Patch
• http://ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35677 · Patch
• http://secunia.com/advisories/25606 · Vendor Advisory
• http://supportconnectw.ca.com/public/sams/lifeguard/infodocs/caarcservebld-securitynotice.asp · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2007-5006 · Security Note
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=598 · Note
• http://securityfocus.com/archive/1/480252/100/100/threaded · Note
• http://securitytracker.com/id?1018728 · Note
• http://securityfocus.com/bid/24348 · Note