CVEvulnerability
CVE-2007-5328
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-10-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The Message Engine RPC service in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows attackers to execute arbitrary code by using certain "insecure method calls" to modify the file system and registry, aka "Privileged function exposure."
Affected configurations
• broadcom brightstor arcserve backup 9.01
• broadcom brightstor arcserve backup 10.5
• broadcom brightstor arcserve backup 11
• broadcom brightstor arcserve backup 11.1
• broadcom brightstor arcserve backup 11.5
• broadcom brightstor enterprise backup 10.5
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/27192 secunia.com
- http://supportconnectw.ca.com/public/storage/infodocs/basb-secnotice.asp Patch
- http://www.securityfocus.com/archive/1/482121/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/484229/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26015 www.securityfocus.com
- http://www.securitytracker.com/id?1018805 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/3470 www.vupen.com
- http://www.zerodayinitiative.com/advisories/ZDI-07-069.html www.zerodayinitiative.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37067 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/27192 secunia.com
- http://supportconnectw.ca.com/public/storage/infodocs/basb-secnotice.asp Patch
- http://www.securityfocus.com/archive/1/482121/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/484229/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26015 www.securityfocus.com
- http://www.securitytracker.com/id?1018805 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/3470 www.vupen.com
- http://www.zerodayinitiative.com/advisories/ZDI-07-069.html www.zerodayinitiative.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37067 exchange.xforce.ibmcloud.com