CVE-2007-5005: Path Traversal
Directory traversal vulnerability in rxRPC.dll in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allows remote attackers to upload and overwrite arbitrary files via a ..\ (dot dot backslash) sequence in the destination filename argument to sub-function 8 in the rxrReceiveFileFromServer command.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-5005?
CVE-2007-5005 has a moderate severity level due to its potential for unauthorized file upload and overwrite.
How do I fix CVE-2007-5005?
To fix CVE-2007-5005, apply the latest patches provided by Broadcom for affected versions of BrightStor ARCserve Backup.
Which versions are affected by CVE-2007-5005?
CVE-2007-5005 affects BrightStor ARCserve Backup for Laptops and Desktops versions 11.0 through 11.5.
What type of vulnerability is CVE-2007-5005?
CVE-2007-5005 is a directory traversal vulnerability that allows attackers to manipulate file paths.
Can CVE-2007-5005 be exploited remotely?
Yes, CVE-2007-5005 can be exploited remotely, allowing attackers to upload and overwrite arbitrary files.