CVE-2007-5328
First published: Sat Oct 13 2007(Updated: )
The Message Engine RPC service in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows attackers to execute arbitrary code by using certain "insecure method calls" to modify the file system and registry, aka "Privileged function exposure."
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Broadcom ARCserve Backup | =9.01 | |
| Broadcom ARCserve Backup | =10.5 | |
| Broadcom ARCserve Backup | =11 | |
| Broadcom ARCserve Backup | =11.1 | |
| Broadcom ARCserve Backup | =11.5 | |
| Broadcom BrightStor Enterprise Backup | =10.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://supportconnectw.ca.com/public/storage/infodocs/basb-secnotice.asp
- http://www.zerodayinitiative.com/advisories/ZDI-07-069.html
- http://www.securityfocus.com/bid/26015
- http://www.securitytracker.com/id?1018805
- http://secunia.com/advisories/27192
- http://www.vupen.com/english/advisories/2007/3470
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37067
- http://www.securityfocus.com/archive/1/484229/100/0/threaded
- http://www.securityfocus.com/archive/1/482121/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2007-5328?
CVE-2007-5328 is considered to have a high severity due to the potential for arbitrary code execution.
How do I fix CVE-2007-5328?
To fix CVE-2007-5328, update to a non-vulnerable version of CA BrightStor ARCServe or Enterprise Backup.
What software is affected by CVE-2007-5328?
CVE-2007-5328 affects CA BrightStor ARCServe Backup versions 9.01 through 11.5 and CA BrightStor Enterprise Backup version 10.5.
What kind of vulnerability is CVE-2007-5328?
CVE-2007-5328 is a vulnerability that allows attackers to execute arbitrary code through insecure method calls.
Is there a workaround for CVE-2007-5328?
There are no documented workarounds for CVE-2007-5328; the best action is to apply the necessary updates.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/remedy
- agent/references
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/broadcom
- canonical/broadcom arcserve backup
- version/broadcom arcserve backup/9.01
- version/broadcom arcserve backup/10.5
- version/broadcom arcserve backup/11
- version/broadcom arcserve backup/11.1
- version/broadcom arcserve backup/11.5
- canonical/broadcom brightstor enterprise backup
- version/broadcom brightstor enterprise backup/10.5