CVE-2007-5325: Buffer Overflow
First published: Sat Oct 13 2007(Updated: )
Multiple buffer overflows in (1) the Message Engine and (2) AScore.dll in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allow remote attackers to execute arbitrary code via unspecified vectors.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| CA BrightStor ARCserve Backup | =10.5 | |
| CA BrightStor ARCserve Backup | =11.5 | |
| CA BrightStor ARCserve Backup | =11 | |
| CA BrightStor ARCserve Backup | =11.1 | |
| CA BrightStor ARCserve Backup | =9.01 | |
| Broadcom BrightStor Enterprise Backup | =10.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://supportconnectw.ca.com/public/storage/infodocs/basb-secnotice.asp
- http://www.securityfocus.com/bid/26015
- http://www.securitytracker.com/id?1018805
- http://secunia.com/advisories/27192
- http://www.vupen.com/english/advisories/2007/3470
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37063
- http://www.securityfocus.com/archive/1/482121/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2007-5325?
CVE-2007-5325 is considered a high-severity vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2007-5325?
To fix CVE-2007-5325, you should update your CA BrightStor ARCServe Backup to the latest version that addresses this vulnerability.
Which versions of BrightStor ARCServe Backup are affected by CVE-2007-5325?
CVE-2007-5325 affects CA BrightStor ARCServe Backup versions 9.01 through 11.5 and Enterprise Backup r10.5.
Can CVE-2007-5325 be exploited remotely?
Yes, CVE-2007-5325 can be exploited by remote attackers due to buffer overflow vulnerabilities in the Message Engine and AScore.dll.
What types of attacks can CVE-2007-5325 enable?
CVE-2007-5325 can enable remote attackers to execute arbitrary code on vulnerable systems.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/remedy
- agent/references
- agent/last-modified-date
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/weakness
- agent/softwarecombine
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/broadcom
- canonical/ca brightstor arcserve backup
- version/ca brightstor arcserve backup/10.5
- version/ca brightstor arcserve backup/11.5
- version/ca brightstor arcserve backup/11
- version/ca brightstor arcserve backup/11.1
- version/ca brightstor arcserve backup/9.01
- canonical/broadcom brightstor enterprise backup
- version/broadcom brightstor enterprise backup/10.5