CVE-2007-5328: Critical severity Broadcom Brightstor Arcserve Backup vulnerability

Published Oct 13, 2007

Updated

The Message Engine RPC service in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows attackers to execute arbitrary code by using certain "insecure method calls" to modify the file system and registry, aka "Privileged function exposure."

Affected Software

6 affected components

Broadcom Brightstor Arcserve Backup=10.5

Broadcom Brightstor Arcserve Backup=11.5

Broadcom Brightstor Arcserve Backup=11

Broadcom Brightstor Arcserve Backup=11.1

Broadcom Brightstor Arcserve Backup=9.01

Broadcom Brightstor Enterprise Backup=10.5

Remediation

Patch Available

http://supportconnectw.ca.com/public/storage/infodocs/basb-secnotice.asp

Event History

Oct 13, 2007

CVE Published

12:17 AM

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-5328?

CVE-2007-5328 is considered to have a high severity due to the potential for arbitrary code execution.

How do I fix CVE-2007-5328?

To fix CVE-2007-5328, update to a non-vulnerable version of CA BrightStor ARCServe or Enterprise Backup.

What software is affected by CVE-2007-5328?

CVE-2007-5328 affects CA BrightStor ARCServe Backup versions 9.01 through 11.5 and CA BrightStor Enterprise Backup version 10.5.

What kind of vulnerability is CVE-2007-5328?

CVE-2007-5328 is a vulnerability that allows attackers to execute arbitrary code through insecure method calls.

Is there a workaround for CVE-2007-5328?

There are no documented workarounds for CVE-2007-5328; the best action is to apply the necessary updates.