CVE-2007-5325: Buffer Overflow

Published Oct 13, 2007

Updated

Multiple buffer overflows in (1) the Message Engine and (2) AScore.dll in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allow remote attackers to execute arbitrary code via unspecified vectors.

Affected Software

6 affected components

Broadcom Brightstor Arcserve Backup=10.5

Broadcom Brightstor Arcserve Backup=11.5

Broadcom Brightstor Arcserve Backup=11

Broadcom Brightstor Arcserve Backup=11.1

Broadcom Brightstor Arcserve Backup=9.01

Broadcom Brightstor Enterprise Backup=10.5

Remediation

Patch Available

http://supportconnectw.ca.com/public/storage/infodocs/basb-secnotice.asp

Event History

Oct 13, 2007

CVE Published

12:17 AM

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-5325?

CVE-2007-5325 is considered a high-severity vulnerability due to its potential to allow remote code execution.

How do I fix CVE-2007-5325?

To fix CVE-2007-5325, you should update your CA BrightStor ARCServe Backup to the latest version that addresses this vulnerability.

Which versions of BrightStor ARCServe Backup are affected by CVE-2007-5325?

CVE-2007-5325 affects CA BrightStor ARCServe Backup versions 9.01 through 11.5 and Enterprise Backup r10.5.

Can CVE-2007-5325 be exploited remotely?

Yes, CVE-2007-5325 can be exploited by remote attackers due to buffer overflow vulnerabilities in the Message Engine and AScore.dll.

What types of attacks can CVE-2007-5325 enable?

CVE-2007-5325 can enable remote attackers to execute arbitrary code on vulnerable systems.