PT-2007-6399 · Ca · Ca Brightstor Arcserve Backup+1

Published 2007-10-13 · Updated 2021-04-07 · CVE-2007-5328

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: CA BrightStor ARCServe BackUp versions 9.01 through 11.5 CA Enterprise Backup version 10.5

Description: The issue allows attackers to execute arbitrary code by using certain insecure method calls to modify the file system and registry. This is related to the exposure of privileged functions.

Recommendations: For CA BrightStor ARCServe BackUp versions 9.01 through 11.5, update to a version outside of this range to mitigate the risk. For CA Enterprise Backup version 10.5, update to a version later than 10.5 to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2007-5328

Affected Products

Ca Brightstor Arcserve Backup

Ca Enterprise Backup

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2007-5328 · Security Note
• http://supportconnectw.ca.com/public/storage/infodocs/basb-secnotice.asp · Patch
• http://vupen.com/english/advisories/2007/3470 · Note
• http://securityfocus.com/archive/1/484229/100/0/threaded · Note
• http://securityfocus.com/archive/1/482121/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37067 · Note
• http://zerodayinitiative.com/advisories/ZDI-07-069.html · Note
• http://securityfocus.com/bid/26015 · Note
• http://securitytracker.com/id?1018805 · Note
• http://secunia.com/advisories/27192 · Note