CVE-2007-5331: Code Injection

Published Oct 13, 2007

Updated

Queue.dll for the message queuing service (LQserver.exe) in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows remote attackers to execute arbitrary code via a malformed ONRPC protocol request for operation 0x76, which causes ARCserve Backup to dereference arbitrary pointers.

Affected Software

9 affected components

Broadcom Brightstor Arcserve Backup=9.01

Broadcom Brightstor Arcserve Backup=11.1

Broadcom Brightstor Arcserve Backup=11.5

Broadcom Brightstor Enterprise Backup=10.5

Broadcom Business Protection Suite=2.0

Broadcom Server Protection Suite=2

CA BrightStor ARCserve Backup=11

CA Business Protection Suite=2.0

Remediation

Patch Available

http://supportconnectw.ca.com/public/storage/infodocs/basb-secnotice.asp

Event History

Oct 13, 2007

CVE Published

12:17 AM

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-5331?

CVE-2007-5331 is rated as critical due to its ability to allow remote attackers to execute arbitrary code.

How do I fix CVE-2007-5331?

To fix CVE-2007-5331, apply the latest patches from Broadcom for the affected versions of BrightStor and Business Protection Suite.

What products are affected by CVE-2007-5331?

CVE-2007-5331 affects CA BrightStor ARCServe Backup versions 9.01 to 11.5 and CA Enterprise Backup version 10.5.

Can CVE-2007-5331 be exploited remotely?

Yes, CVE-2007-5331 can be exploited remotely via a malformed ONRPC protocol request.

Is there a workaround for CVE-2007-5331?

There are no official workarounds for CVE-2007-5331, so immediate patching is recommended.